Not able to create SharePoint Indexer in AI Search

Question

Hi,

I am trying to use Sharepoint indexer which is in preview currently by following the documentation mentioned -

https://learn.microsoft.com/en-us/azure/search/search-howto-index-sharepoint-online#step-6-create-an-indexer

While creating indexer I am getting this error, I have already validated credentials by making a separate GET call but still it doesn't work.

Has anyone faced this issue before and what was done to fix it?

{
    "error": {
        "code": "",
        "message": "Error with data source: Code: accessDenied\r\nMessage: Access denied\r\nInner error:\r\n\tAdditionalData:\r\n\tdate: 2024-08-06T09:21:52\r\n\trequest-id: 2fa3208a-61f4-434d-a1b4-357c012fca13\r\n\tclient-request-id: 2fa3208a-61f4-434d-a1b4-357c012fca13\r\nClientRequestId: 2fa3208a-61f4-434d-a1b4-357c012fca13\r\n  Please adjust your data source definition in order to proceed."
    }
}

Answer 1

@Nitish Sharma Thanks for asking question! Could you please check your connection string format-

The format of the connection string changes based on whether the indexer is using delegated API permissions or application API permissions

Delegated API permissions connection string format

SharePointOnlineEndpoint=[SharePoint site url];ApplicationId=[Azure AD App ID];TenantId=[SharePoint site tenant id]

Application API permissions connection string format

SharePointOnlineEndpoint=[SharePoint site url];ApplicationId=[Azure AD App ID];ApplicationSecret=[Azure AD App client secret];TenantId=[SharePoint site tenant id]

Note

If the SharePoint site is in the same tenant as the search service and system-assigned managed identity is enabled, TenantId doesn't have to be included in the connection string.

If the SharePoint site is in a different tenant from the search service, TenantId must be included.

Let us know.