Spaceman Cloud with Local Access Control — OneDrive Setup Guide

Do I need this?

You'd need it if your Spaceman software runs in the cloud, but your access control system — the hardware and software that controls entry to your units — runs on a computer at your site. The two systems need to share a file so that your access control system knows who is allowed in.

We use Microsoft OneDrive to bridge the gap. Here is how it works:

1. On a regular schedule, your Spaceman Cloud system generates an access control file.
2. It uploads that file to a folder in your OneDrive.
3. The OneDrive app on your local server automatically syncs/downloads it to your PC.
4. Your access control system reads the file as it normally would — nothing changes on that side.

Once set up, this all happens automatically in the background. No manual steps are needed day to day, and no user logins are required.

Before you begin

You will need:

• A Microsoft 365 account with OneDrive (WORK or SCHOOL account) 

• Access to your organisation's Azure Active Directory — you will need an administrator account, or the help of your IT department, for one of the steps below
• Access to the PC or server where your access control system runs

Step 1 — Install OneDrive on your local server

The OneDrive sync app keeps a folder on your PC in sync with your OneDrive storage. You will need this running on the PC or server that runs your access control system.

1. On the PC or server, check whether the OneDrive app is already installed — look for a cloud icon in the system tray (bottom-right of the screen). If it is there and signed in, you can skip this step.
2. If not installed, OneDrive is included with Windows 10 and 11, or can be downloaded from microsoft.com/onedrive.
3. Open the OneDrive app and sign in with your Microsoft 365 account.
4. OneDrive will create a synced folder on your PC. It is usually found in File Explorer under OneDrive — [Your Company Name].

Step 2 — Create a folder in OneDrive

Create a dedicated folder where the access control files will be stored.

1. Open onedrive.com in a browser and sign in with your Microsoft 365 account.
2. Click + New > Folder.
3. Give it a clear name, such as Access Control or your site name.
4. Note down the folder path (e.g. /Access Control/) — you will need to tell us this later.

Step 3 — Register an application in Azure

This step creates a secure connection that allows our system to upload files to your OneDrive folder automatically, without needing to log in each time. This is done through your organisation's Microsoft Azure portal.

1. Go to portal.azure.com and sign in with an administrator account.
2. In the search bar at the top, search for App registrations and open it.
3. Click + New registration.
4. Fill in the details:
   • Name: Something like Spaceman Access Control
   • Supported account types: Select Accounts in this organisational directory only
   • Redirect URI: Leave blank
5. Click Register.

Note down the IDs

On the app's Overview page, copy and keep these two values — you will need to send them to us:

• Application (client) ID
• Directory (tenant) ID

Step 4 — Add API permissions

1. In the left-hand menu of your app, click API permissions.
2. Click + Add a permission.
3. Select Microsoft Graph.
4. Select Application permissions (not "Delegated").
5. In the search box, type Files.ReadWrite.All and tick it. (or Sites.ReadWrite.All  for SharePoint)
6. Click Add permissions.
7. Back on the permissions page, click "Grant admin consent for [your organisation]" and confirm by clicking Yes.
8. You should now see a green tick next to Files.ReadWrite.All.(/ Sites.ReadWrite.All)

Step 5 — Create a client secret

A client secret is like a password that allows our system to connect securely.

1. In the left-hand menu of your app, click Certificates & secrets.
2. Click + New client secret.
3. Give it a description (e.g. Spaceman Access Control) and choose an expiry (24 months is a good choice).
4. Click Add.
5. Immediately copy the "Value" column — this is your client secret. It is only shown once; if you navigate away, it will be hidden permanently.

Step 6 — Send us your details

Please send us the following information via your usual support channel. Please share these details securely where possible. (We have had people use https://onetimesecret.com/en/)

Step 7 — Point your access control system at the synced folder

Once OneDrive is running on your local server, access files will appear inside the OneDrive folder on that PC. You will need to tell your access control system (e.g. PTI) where to look for the file.

The folder is usually found at a path like:

• C:\Users\[username]\OneDrive - [Your Company]\Access Control\

The exact path depends on how OneDrive is set up on your PC. You can find it by opening File Explorer and looking inside the OneDrive folder.

If you are unsure how to change the file path in your access control software, please contact your access control system supplier for guidance.

What happens after setup?

Access control files will be generated and uploaded automatically. Your local access control system will pick them up via OneDrive sync.

Spaceman Cloud — Local Access Control via OneDrive • Last updated March 2026