Before CloudMove can write files to a client's SharePoint or OneDrive, an admin from that tenant has to grant consent. This is a one-time operation per client.
On the client's detail page, click Connect Microsoft 365.

You'll be redirected to Microsoft's consent page. Sign in as a Global Admin and review the permissions CloudMove is requesting. Accept.
When you return to CloudMove, the client shows a green Connected badge.

Once connected, CloudMove can:
CloudMove cannot read tenant email, calendars, messages, or anything outside files and user directory info.
If the consent flow errors or the admin cancels, the client stays in a disconnected state. Click Connect Microsoft 365 again to retry. See M365 Connection Issues if you keep hitting errors.
There's no "disconnect" button. If you need to revoke CloudMove's access, the admin removes the CloudMove enterprise app from the Microsoft 365 admin center (Enterprise applications → CloudMove → Delete).
With M365 connected, you're ready to create your first project for this client.