If your organization possesses files stored in a SharePoint site, you might want your agents to leverage their content to answer users' queries. This can be done by creating Azure application for SharePoint credentials that will give access to your SharePoint tenant via an Azure application. These credentials can then be used to access a specific SharePoint site via a Microsoft SharePoint data source.

Note that connecting to your SharePoint can also be done via SharePoint credentials, which use the standard credentials (username and password) of your SharePoint tenant.

1 Prerequisites
- 1.1 Creating an application with the Sites.Selected permission
- 1.2 Granting read permissions to the application
2 Adding Azure application for SharePoint credentials
3 What’s next?

Prerequisites

Before creating the credentials, you must first ensure you have created a dedicated application in Microsoft Azure (also known as Microsoft Entra).

Creating an application with the Sites.Selected permission

Open the Microsoft Azure Admin Portal.
Go to Identity > Applications > App registrations.
Click New registration.
Give the application a name. Select Accounts in this organizational directory only. Click Register.
Go to Manage > Certificates & secrets.
Click Client secrets > New client secret.
Give the client secret a description and an expiration date. Click Add.
Make sure to copy the value of the client secret now as it is only visible immediately after creation.
Go to Manage > API permissions.
Click Add a permission.
Select Microsoft Graph > Application permissions > Sites > Sites.Selected. Click Add permissions.
Ask an administrator to grant their consent on the permission or click Grant admin consent if you are an administrator.
Go to Overview.
Copy the Application (client) ID and the Directory (tenant) ID.

Do not forget to copy the Application ID (Client ID), Directory ID (Tenant ID), and Client Secret, as these credentials will be used to create the Azure application for SharePoint credentials.

Granting read permissions to the application

Ask an Azure Admin to explicitly grant read permissions on the SharePoint site specific to the application you just created.

Adding Azure application for SharePoint credentials

Below are the steps to create new Azure application for SharePoint credentials:

Go to Administration > Credentials & models.
Click Add credentials to create new credentials;
Select the Azure application for SharePoint card;
Name your credential, e.g. SharePoint Azure application Jean;
Select who to share the credentials with. This will determine who can use your credentials in the data sources. If you want to keep these credentials private, select Only me. If you want to share them with other builders, select Builders.
Provide the Tenant URL of your SharePoint, for example, https://company.sharepoint.com.
Provide the Tenant ID of the application.
Provide the Client ID of the application.
Provide the Client secret associated with the given Client ID.
Click Add credentials on the bottom right of the page to finalize the creation.

The new credentials are now available in the Credentials list. You can now use them when creating a new Microsoft SharePoint data source.

What’s next?

Learn how to create a Microsoft SharePoint data source that uses your credentials by reading this page: Microsoft SharePoint.