FP: If you're able to affirm that no uncommon functions were executed because of the app and the app includes a authentic company use inside the organization. This detection identifies OAuth apps with substantial privilege permissions that execute a lot of queries and edits in OneDriv