Skip to main content
New Vectors only

​
Overview

SharePoint is Microsoft’s document management platform. Datazone connects to one SharePoint site through Microsoft Graph with app-only (client credentials) access, and indexes the documents in its document libraries into a Vector.
SharePoint sources hold documents, not tables. They are used by Vectors only — they have no extracts and no schema to infer.

​
Prerequisites

Create an app registration in Microsoft Entra ID and give it read access to the site. See How to get the credentials below.

​
Connection Parameters

Set on the source when you create it. Names match the API and CLI payload.
​
string
required
Name — a unique identifier for your SharePoint source.
​
string
required
Site URL — the SharePoint site whose document libraries can be indexed, for example https://contoso.sharepoint.com/sites/Finance.
​
string
required
Tenant ID — the Directory (tenant) ID of the app registration.
​
string
required
Client ID — the Application (client) ID of the app registration.
​
string
required
Client Secret — the client secret value of the app registration. Stored encrypted.

​
How to get the credentials

1

Register an app

In the Azure portal, open Microsoft Entra ID → App registrations → New registration. Give it a name such as datazone-sharepoint and leave the defaults (single tenant).
2

Copy the Tenant ID and Client ID

On the app’s Overview page, copy Directory (tenant) ID and Application (client) ID.
3

Create a client secret

Go to Certificates & secrets → New client secret, choose an expiry, and copy the Value immediately. It is shown only once. Use the Value, not the Secret ID.
4

Grant read permission

Go to API permissions → Add a permission → Microsoft Graph → Application permissions and add one of:
  • Sites.Read.All — read every site in the tenant. Simplest to set up.
  • Sites.Selected — read only the sites you explicitly allow. Tighter, but a tenant admin must also grant the app access to your site (for example with POST /sites/{site-id}/permissions in Microsoft Graph, role read).
5

Grant admin consent

Click Grant admin consent for <your tenant>. This needs a Global Administrator or Privileged Role Administrator. Without it, Datazone gets a 403 from Microsoft Graph.
6

Copy the Site URL

Open the site in SharePoint and copy its address up to the site name, for example https://contoso.sharepoint.com/sites/Finance.

​
Using the source in a Vector

When you create a Vector, choose a connected source as the data source, then pick a path. The vector stores them as source and source_path, and both must be set together. The path is <document library>/<folder path>: The path picker in the Datazone UI lets you browse the site’s libraries and folders instead of typing the path.

​
Limitations

  • One source connects to one site. Create another source for each additional site.
  • Subfolders are indexed recursively.
  • Supported file types: PDF, CSV, DOCX, XLSX, XLS, MD, TXT. Other files are skipped.
  • Access is app-only, so the app sees what its permission allows, not what an individual user can see.

​
Troubleshooting