Permissions needed in order to save a file into sharepoint from Salesforce.

Question

Permissions needed in order to save a file into sharepoint from Salesforce.

SB 21

I am trying to create an integration to SharePoint from Salesforce. I was given access to a folder in the organization. In order to establish the connection, I created an app in sharepoint, copied the client Id and Secret to Salesforce and setup the connection.

Once I gave the permissions for the app and save, It asked me whether I could trust this app. But the Trust button was disabled with a message ' Your tenant admin needs to approve the app'. How can I resolve this?

My purpose is save a file from Salesforce to SharePoint and I have only access to that particular folder in sharepoint. What SharePoint permissions do I need in that folder in order to make the integration save a file in that folder?

Suppose https://xxxxxxxx.sharepoint.com/sites/587923/xxxxxx%20Beige/Shared%20Documents/Forms/AllItems.aspx?csf=1&web=1&e=NCyMPQ&cid=8700f339%2Wgyj6%22toQM%2WWmab%Rouwzy&RootFolder=%2Fsites%2F587923%2Fxxxxx%20Beige%2FShared%20Documents%2F1990%5FDecommision%20Webstore%2FWQ%2FCorrupt%20Device&FolderCTID=0x078041695E36FC94D7D5B2Af9E548FI89SF8 is the path to my folder 'Corrupt Device' from the address bar, then what should be the endpoint url to be provided in order to issue a POST request to SharePoint?

I am totally confused with the endpoint url. Can you please provide an answer to these questions?

Accepted answer

0 additional answers

Your answer

Answer 1

Tong Zhang_MSFT 9,251

Hi @SB ,

Once I gave the permissions for the app and save, It asked me whether I could trust this app. But the Trust button was disabled with a message ' Your tenant admin needs to approve the app'.

To help you better, is the error you described as shown in the screenshot below?

If yes, please use https://xxxx-admin.sharepoint.com/_layouts/15/appinv.aspx to grant permissions to the newly created principal.

According to my research and testing, you can use the following Rest API to upload file to SharePoint (Per my test, we need to grant the APP Write, Manage, or FullControl permissions when we upload file to SharePoint):

_api/Web/GetFolderByServerRelativeUrl('/sites/abc/FolderTest/Test')/Files/add(url='rename.xlsx',overwrite=true)')

More information for reference:
Upload a file by using the REST API and jQuery
Granting access using SharePoint App-Only

Hope it can help you. Thanks for your understanding.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

RaytheonXie_MSFT 40,471 Reputation points Microsoft External Staff

2022-12-22T06:54:56.543+00:00

Hi @SB ,
Have you tried the solution TongZhangMSFT-7548 proposed?

If you have any questions or progress, you can contact me in time.

Looking forward to your reply

Have a lucky day!

Thanks,
Raytheon Xie
Tong Zhang_MSFT 9,251 Reputation points

2022-12-26T05:35:51.907+00:00

Hi @SB ,

Do you have any further questions about this thread ? If you have any questions or progress, you can contact me in time.
SB 21 Reputation points

2023-01-06T10:55:52.847+00:00

@Tong Zhang_MSFT
Hi, I am bit confused again. I currently have access to a sharepoint folder only https://orgbit.sharepoint.com/sites/115778/orgbit%20Actions/Shared%20Documents/20_Onloading%20Salesforce/XM/Sample%20Records/. My requirement is to sent a document from salesforce to this particular sharepoint folder using REST service.

From what I understand, in order to begin with, I need to create an app in sharepoint and grant write access to that app. ( the app should be created in that particular folder (https://orgbit.sharepoint.com/sites/115778/orgbit%20Actions/Shared%20Documents/20_Onloading%20Salesforce/XM/Sample%20Records/_layouts/15/AppRegNew.aspx) or in the org itself (like https://orgbit.sharepoint.com/_layouts/15/AppRegNew.aspx)?). In the former way, I am getting 500 Internal Server error and latter is displaying a page that this user do not have permission to access this resource. What should I do about this?
Note : I don't have admin access to Sharepoint in my org

Also Whom should I reach out to in order to create an app/approve an app? Tenant admin or site owner?
Tong Zhang_MSFT 9,251 Reputation points

2023-01-09T07:58:38.077+00:00

Hi @SB ,

To help you better, have you successfully created an application? Are you getting an error message in "_layouts/15/AppRegNew.aspx" ? According to my research and testing, you need to use the site's owner account to access the page (https://xxxx.sharepoint.com/_layouts/15/appregnew.aspx). Then contact your tenant administrator to approve the app (https://xxxx-admin.sharepoint.com/_layouts/15/appinv.aspx).

More information for reference: Setting up an app-only principal with tenant permissions
SB 21 Reputation points

2023-01-09T18:34:35.163+00:00

This seems pretty clear for me. So app creation and permission granting is happening from the org level (https://xxxx.sharepoint.com/_layouts/15/appregnew.aspx) and has nothing to do with the folder in which I need to write. Once the app is approved, I use the callback URL to access the folder in which I have access right? Thank you for the good support.
Tong Zhang_MSFT 9,251 Reputation points

2023-01-11T01:06:17.647+00:00

Hi @SB ,

Yes, application creation and permission grant is done at the organization level. If you have any issue about SharePoint, you are welcome to raise a ticket in this forum. Thanks for your understanding and support.

Share via

Permissions needed in order to save a file into sharepoint from Salesforce.

0 additional answers

Your answer