Best practise M-Files account for Hubshare in Cloudvaults

Hi All ,

When we have a cloudvault we often use azure AD+2FA as Identity provider.  When we connect hubshare to that vault , Azure is not  available only M-Files account.

How can I prevent the usage of that account outside Hubshare? In case the password leaks, they have full rights on everything.  So only the Hub may use this account to access the cloudvault.

- Thought about Pre-Shared key, but that is not available in Cloudvaults.

- Firewall rules cannot be set

Any other ideas?

Regards,

Marcel