Microsoft SharePoint Connector

Interact with sites, drives, and items connected to your instance of Microsoft SharePoint.

Connections

Certificate Credentials

Authenticates actions in all Microsoft's Graph API services.

App Registration Requirements

First, create an app registration in Microsoft Entra by following the steps in the OAuth connection guide. Then configure the following Microsoft Graph Application permissions:

Site Operations:

• Sites.Read.All - Read items in all site collections
• Sites.ReadWrite.All - Read and write items in all site collections
• Sites.Manage.All - Create, edit, and delete items and lists in all site collections
• Sites.FullControl.All - Full control of all site collections

File Operations:

• Files.Read.All - Read files in all site collections
• Files.ReadWrite.All - Read and write files in all site collections

List Operations:

• Sites.ReadWrite.All - Required for list operations
• Sites.Manage.All - For creating and managing lists

User and Group Access:

• User.Read.All - Read all users' profiles
• Group.Read.All - Read all groups

Certificate Requirements

Before configuring certificate credentials, ensure:

• Certificate issued by a Certificate Authority (CA) for production, or self-signed for development
• RSA key size: minimum 2048 bits (4096 bits recommended)
• Certificate in X.509 format
• Public key formats: .cer, .pem, or .crt
• Private key in PEM or PKCS#12 format

Registering Certificate with Azure

1. Ensure app registration is complete with required permissions
2. Navigate to Certificates & Secrets in the app registration
3. Select the Certificates tab
4. Click Upload certificate
5. Select the public certificate file (.cer, .pem, or .crt)
6. Add an optional description
7. Click Add to upload

After upload, note these values:

• Certificate Thumbprint - SHA-1 hash (e.g., "931E8F84B98A4B5F93AD609FD5E8D0BA1AB90F87")
• Start Date and Expiration Date
• Certificate ID - Automatically generated

Connection Configuration

Configure the following fields:

• Tenant ID: Azure AD Directory ID from app registration
• Client ID: Application ID from app registration
• Certificate Thumbprint: SHA-1 thumbprint from uploaded certificate (remove spaces)
• Private Key: Certificate private key in PEM format
• Scope: https://graph.microsoft.com/.default for application permissions

Private Key Format

The private key must be in PEM format with appropriate headers:

-----BEGIN PRIVATE KEY-----
[base64 encoded private key]
-----END PRIVATE KEY-----

Or for RSA keys:

-----BEGIN RSA PRIVATE KEY-----
[base64 encoded RSA private key]
-----END RSA PRIVATE KEY-----

Microsoft SharePoint OAuth 2.0 (Deprecated)

Authenticates actions in the Microsoft SharePoint component.

Creating an App Registration

Once you have an instance of Microsoft SharePoint licensed to your account, you will need to create and configure a new "App Registration" within your Azure Active Directory tenant.

1. Navigate to Microsoft Entra Identity > Applications > App registrations
2. Select New registration
3. Configure the basic settings:
   • Name: Provide a descriptive name for the application
   • Supported account types: Select Accounts in any organizational directory (Any Azure AD directory - Multitenant)
   • Redirect URI: Select Web platform and add https://oauth2.flowbuilder.eu.lansweeper.com/callback for EU sites or https://oauth2.flowbuilder.us.lansweeper.com/callback for US sites
4. Click Register to create the app registration

Obtaining Application Credentials

After registration, navigate to the Overview page and note:

• Application (client) ID - This will be the Client ID
• Directory (tenant) ID - Required for certain connection types

API Permissions Configuration

1. Navigate to API Permissions
2. Click Add a permission
3. Select SharePoint for SharePoint-specific operations
4. Choose Delegated permissions for user-authenticated flows
5. Select the following permissions:

Essential Scopes:

• offline_access - Required for refresh tokens (without this, users re-authenticate every hour)

Site Operations:

• AllSites.Read - Read items in all site collections
• AllSites.Write - Edit or delete items in all site collections
• AllSites.Manage - Create, edit and delete items and lists in all site collections
• AllSites.FullControl - Full control of all site collections

File Operations:

• MyFiles.Read - Read user files
• MyFiles.Write - Read and write user files
• AllSites.Read - Read files in all sites
• AllSites.Write - Read and write files in all sites

List Operations:

• AllSites.Write - Required for list item operations
• AllSites.Manage - For creating and managing lists

User Profile:

• User.Read.All - Read all users' profiles
• User.ReadBasic.All - Read all users' basic profiles

6. Click Add permissions
7. Important: Click Grant admin consent to activate the permissions

Creating Client Secret

1. Navigate to Certificates & Secrets in the app registration
2. Select the Client secrets tab
3. Click New client secret
4. Provide a description and select expiration period
5. Click Add
6. Important: Copy the secret Value immediately - it cannot be retrieved later

Connection Configuration

Configure the following fields:

• Client ID: Application ID from app registration
• Client Secret: Secret value created above
• Authorize URL: Default provided, or tenant-specific URL if not using multitenant
• Token URL: Default provided, or tenant-specific URL if not using multitenant

Tenant-Specific URLs

If the app registration is not configured as multitenant, replace the default URLs with tenant-specific versions:

• Authorize URL: https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/authorize
• Token URL: https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token

This connection uses OAuth 2.0, a common authentication mechanism for integrations.
Read about how OAuth 2.0 works here.

OAuth 2.0 Authorization Code

Authenticates actions in all Microsoft's Graph API services.

The templated OAuth flow enables user authentication with SharePoint to access data on their behalf.

App Registration

First, create an app registration in Microsoft Entra by following the steps in the OAuth connection guide.

Permissions

Configure SharePoint Delegated permissions in the app registration:

• Select all permissions required for the integration
• Grant admin consent for the organization
• Include offline_access scope for refresh token support

Creating Client Secret

1. Navigate to Certificates & Secrets in the app registration
2. Click New client secret
3. Provide a description and select expiration period
4. Click Add
5. Copy the secret Value (not the Secret ID)

Connection Configuration

Configure the following fields:

• Client ID: Application ID from app registration
• Client Secret: Secret value created above

For non-multitenant applications, replace the default URLs:

• Authorize URL: https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/authorize
• Token URL: https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token

This connection uses OAuth 2.0, a common authentication mechanism for integrations.
Read about how OAuth 2.0 works here.

OAuth 2.0 Client Credentials

Authenticates actions in all Microsoft's Graph API services.

App Registration

First, create an app registration in Microsoft Entra by following the steps in the OAuth connection guide. Then configure the following Microsoft Graph Application permissions for app only authentication:

Site Operations:

• Sites.Read.All - Read items in all site collections
• Sites.ReadWrite.All - Read and write items in all site collections
• Sites.Manage.All - Create, edit, and delete items and lists in all site collections
• Sites.FullControl.All - Full control of all site collections

File Operations:

• Files.Read.All - Read files in all site collections
• Files.ReadWrite.All - Read and write files in all site collections

List Operations:

• Sites.ReadWrite.All - Required for list operations
• Sites.Manage.All - For creating and managing lists

User and Group Access:

• User.Read.All - Read all users' profiles
• Group.Read.All - Read all groups

Important: Grant admin consent for all configured permissions.

Creating Client Secret

1. Navigate to Certificates & Secrets in the app registration
2. Select the Client secrets tab
3. Click New client secret
4. Provide a description and select expiration period
5. Click Add
6. Important: Copy the secret Value immediately - it cannot be retrieved later

Connection Configuration

Configure the following fields:

• Tenant ID: Azure AD Directory ID from app registration
• Client ID: Application ID from app registration
• Client Secret: Secret value created above
• Scope: https://graph.microsoft.com/.default for application permissions

This connection uses OAuth 2.0, a common authentication mechanism for integrations.
Read about how OAuth 2.0 works here.

Triggers

Drive Changes

Periodically retrieves changes from a specified drive of a site on a configured schedule.

Folder Changes

Periodically retrieves changes from a specified folder of a drive on a configured schedule.

Site Changes

Periodically retrieves changes from all drives of a site on a configured schedule.

Webhook

Receive and validate webhook requests from Sharepoint for webhooks you configure.

Actions

Check Item Exists

Check if a file or folder exists in a SharePoint drive

Create a Folder

Create a Folder in a Drive

Create a Subscription

Create a Subscription to notify you of changes to a resource

Create Item in Site List

Create a new item inside the given site list

Create Site List Subscription

Create a Site List subscription for Microsoft SharePoint

Delete All Instance Subscriptions

Delete all subscriptions pointed at this instance

Delete a Subscription

Delete a Subscription by ID

Download File

Download a file from the specified drive

Get Current User

Get the information and metadata of the user that is currently logged in

Get Drive

Returns the information and metadata of a SharePoint drive

Get File

Get a file from a Drive

Get Item from Site List

Returns the information and metadata of the given item

Get Root Site

Returns the information and metadata of the root SharePoint site in your tenant

Get Site

Returns the information and metadata of the given SharePoint site

Get Site List

Returns the information and metadata of an existing site list

List Changes

Track changes in a driveItem and its children over time.

List Drives

List all drives within any given SharePoint site

List Files in Drive

List all the files from a Drive

List Files in Drive (Deprecated)

List all the files from a Drive. This version of the action is being deprecated. Please replace action with List Files In Drive.

List Folder Files in Drive

List all the files inside of a folder from a Drive

List Folder Files in Drive (Deprecated)

List all the files inside of a folder from a Drive. This version of the action is being deprecated. Please replace action with List Folder Files In Drive.

List Followed Sites

List all Followed Sites

List Items

List Items in a Folder

List Items in Site List

Return all items inside the given site list

List Shared Documents

Lists documents shared with the user.

List Site Lists

List all Site Lists

List Sites

List all SharePoint sites

List Subscriptions

List all available Subscriptions

Move a File

Move a File in a Drive

Raw Request

Send raw HTTP request to Microsoft Sharepoint

Rename a Folder

Rename a Folder in a Drive

Search Items

Search for items across all drives in a SharePoint site

Update File

Update a file to the specified drive

Update Site List Subscription Expiration

Update existing Site List subscription expiration for Microsoft SharePoint

Upload File

Upload a file to the specified drive or folder's drive