Prepare Your Microsoft SharePoint Unstructured (Documents) Connection

To set up your Microsoft SharePoint unstructured content with Data 360, configure details in the Microsoft Azure Portal.

Configure a Microsoft Azure app to establish a connection between Salesforce and Microsoft.
- Make note of the Application (client) ID, Client Secret Value, and Directory (tenant) ID.
- Add API permissions to the App. Select Microsoft Graph as the API, and choose Application permissions (not Delegated permissions) for all of the following.
  - Option A - Broad Access
    This option grants your application broad access to all SharePoint Sites, which is simpler to set up. Add the following Application permissions:
    - Files.Read.All (Application)
    - Sites.Read.All (Application)
  - Option B - Secure Workaround (Restricted Access)
    This option uses the more restrictive Sites.Selected permission, requiring an extra step to explicitly grant the application access to specific sites. Add the following Application permission:
    - Sites.Selected (Application)
      
      Be sure to click Grant Admin Consent for [your organization] to apply the permissions for whichever option you choose.

Grant App Access to a Specific SharePoint Site (For Option B Only)

If you choose the Sites.Selected permission, your application can’t access any site by default. Explicitly grant it access to the target site(s) before proceeding. This step requires a SharePoint or Global admin account with the Sites.FullControl.All scope.

Retrieve Site ID: Go to your SharePoint site and append /_api/site/id to the site URL. For example: https://yourcompany.sharepoint.com/sites/dottedcloud-integration-testing/_api/site/id. The API returns an XML response containing an Edm.Guid value — this is your short-form Site ID. For example, in the response <d:Id m:type="Edm.Guid">a1b2c3d4-e5f6-7890-abcd-ef1234567890</d:Id>, the Site ID is a1b2c3d4-e5f6-7890-abcd-ef1234567890.
Request App Permission: Use an API client like Postman, and send a POST request with the admin’s access token to grant your app read access.
- Request URL: POST https://graph.microsoft.com/v1.0/sites/{siteId}/permissions
- Headers:
  - Authorization: Bearer <admin_access_token>
  - Content-Type: application/json
- Body (JSON):
  JSON

1{
2    "roles": [ "read" ],
3    "grantedToIdentities": [
4        {
5            "application": {
6                "id": "<appId>",
7                "displayName": "<your app name>
8            }
9        }
10    ]
11}

Locate Your SharePoint Site ID

You need your SharePoint Site ID to create an unstructured data lake object. Ask your SharePoint administrator, or do one of the following:

Go to the SharePoint site and click Settings. Select Site information. The ID is under the URL heading.
Alternatively, place the URL of your SharePoint site within a browser and append /_api/site/id at the end of the URL. For example: https://yoursite.sharepoint.com/sites/siteName/_api/site/id. The API returns an XML response. Note the value for Edm.Guid, as this is your Site ID.

Watch a comprehensive demo of how to configure the Microsoft SharePoint Unstructured (Documents) connector.

MS SharePoint Unstructured (Documents) Connection Set-up

Get the Video Transcript

Next Step

Create External Credentials for the Microsoft SharePoint Unstructured (Documents) Connector