Microsoft SharePoint - User Guide

In this article, you will understand step by step how to easily integrate with Microsoft SharePoint

 

Permissions for Microsoft SharePoint Integration 

To successfully connect to SharePoint, it's essential to configure the correct Microsoft Graph permissions. You have two options depending on the level of access you want to grant:

Full Read Access to All Sites

1. Create an application in Azure Active Directory.

2. Add the Files.Read.All permission from Microsoft Graph (Application permissions).

3. Grant admin consent for the permission.

This will allow the app to read files across all SharePoint sites.

Follow the instructions in step 3 below

Alternative Option: Read Access to Specific Sites Only

To restrict access to selected SharePoint sites, follow these steps:

1. Create an application in Azure Active Directory.

2. Add the Sites.Selected permission from Microsoft Graph (Application permissions).

   

3. Grant admin consent for the permission.

4. Copy /_api/site/id and paste it to the URL of the page.
   Example:
   
   For root site:
   https://companyname.sharepoint.com/_api/site/id
   Copy the id value from the page and save it. You will need this later on.

5. Go to the Graph Explorer and log in with an Azure admin account.

6. Use a POST request to this endpoint and add in /sites/{site-id} (replace {site_id} with the id you copied in step 4)

   

7. Use the following request body, replacing app-id and app-name with your app’s values:

   {
     "roles": ["read"],
     "grantedToIdentities": [{
       "application": {
         "id": "app-id",
         "displayName": "app-name"
       }
     }]
   }

8. Open the Modify Permissions tab and click Open the permissions panel.

9. Search for and consent to Sites.FullControl.All - this is needed for Graph Explorer to execute the request.

After granting consent, you should be able to run the query successfully

How to Connect Scytale and Microsoft SharePoint

 2) Search for Microsoft Sharepoint and select 'Connect'.

3) Fill in the following details:

• Application ID - follow step 1 below
• Secret Value - follow step 2 below
• Directory ID (tenant) - follow step 1 below

Follow the steps in this article to learn how to get these credentials

Add a connection name - this will be used to differentiate between your connections - and then select 'Connect'.

4) Select 'Connect' to be redirected to Microsoft to approve the connection.

5) Select 'Accept'.

 

Step 1: How to Register an Application in Azure Active Directory - Create Application and Directory ID

• Log in to the Azure portal and then navigate to Microsoft Entra ID.

• On the left menu, click on App registrations

• On the screen that loads, click on New registration and fill in the following details:

  • Name - you can choose a name, for example: scytale-sharepoint-integration

  • Supported account types - the first option must be selected - "Accounts in this organizational directory only (Default Directory only - Single tenant)".

  • Redirect URI - select Web from the drop-down menu, and in the text box paste the following: https://api.scytale.ai/integrations/microsoft-graph/callback/microsoft-graph

  • Click on Register
    

 

 

Step 2: How to Create a New Client Secret for the App

• Ensure you are still within the "scytale-sharepoint-integration" created in step 1.

• Go to "Certificates & secrets"

• Click on New client secret

  • Description - you can choose a description, for example: scytale-sharepoint-key

  • Expires - we recommend selecting 24 months, as we cannot collect data after the key expires.

  • Click on Add
    

    

• Click on the copy sign on the (C) - "Value" column.