Group-based selective scanning is available on the following cloud apps. Not all cloud apps are conducive to selective scanning. A cloud app must integrate with Azure Active Directory Services or other Identity Providers (through Cloud Identity Engine) and must enforce file ownership. Many cloud apps are designed to share files with multiple owners, so they don’t have the necessary characteristics to work in a selective scanning framework.