Every user needs to use the SphereShield Compliance App once so we can have their API and Graph Tokens.

Admin Tracking - Compliance App Status

Sign into the SphereShield Admin Portal
In the Users page you will see a column titled Compliance App Status.
A user who has not clicked on the App will be under the status “Not Activated”.
A user who has clicked and had both their tokens successfully retrieved will be under the status “Activated”.

SphereShield CASB Knowledge Base