> For the complete documentation index, see [llms.txt](https://docs.teleskope.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.teleskope.ai/connectors/saas/sharepoint-and-onedrive.md).

# Sharepoint & OneDrive

## Requirements

* Within Azure, an Entra App was created and configured as described [here](/connectors/azure.md)
* Within Teleskope, you have a Teleskope Account with the Admin role

## Integration

{% stepper %}
{% step %}

#### Grant the Teleskope App Microsoft Graph API scopes

Navigate to your App Registration, then Manage -> API Permissions, and assign the following Graph API scopes via *Application Permissions*:

* **Directory.Read.All** – read users, groups, directories to map identities
* **ExternalUserProfile.Read.All** – identify guest/external users
* **Files.Read.All** – read files for discovery/scanning/classification
* **Group.Read.All** – list groups to analyze access
* **GroupMember.Read.All** – enumerate membershjip for permission inheritance
* **RoleManagement.Read.All** – understand privileged roles
* **SharePointTenantSettings.Read.All** – inspect tenant-wide settings (e.g., sharing rules)
* **Sites.Read.All** – enumerate SharePoint sites to index and crawl content
* **User.Read.All** – get user properties

Optional Permissions to enable features in 'Policy Maker'

* **InformationProtectionPolicy.Read.All** – read Purview labels/policies
* **Files.ReadWrite.All** – enable remediation such as applying Purview sensitivity labels, quarantining, or deletion

If you enable Policy Maker actions that apply or remove Purview sensitivity labels, also enable [metered APIs and services in Microsoft Graph](https://learn.microsoft.com/en-us/graph/metered-api-setup?tabs=azurecloudshell) for the Teleskope app registration. Microsoft treats the SharePoint and OneDrive `assignSensitivityLabel` API as a metered Graph API, so Graph permissions and admin consent alone are not sufficient for that action.

Lastly, grant admin consent to all of the permissions.
{% endstep %}

{% step %}
**Enroll SharePoint in Teleskope**

1. Navigate to Settings > Connector > Microsoft 365
2. Click Enroll New Tenant
3. Input your Tenant ID, Tenant Name, ClientID, and corresponding secret value.
   {% endstep %}
   {% endstepper %}