Granting Permissions in Microsoft Azure
This guide offers step-by-step instructions on how to grant the appropriate permissions for our app-based sync method.
Last updated 9 months ago
Access the Microsoft Azure Portal
Go to the following URL: https://portal.azure.com/#view/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/~/AppAppsPreview
Search for MAIA:
In the Enterprise Applications section, use the search field (indicated by the red box) to look for "MAIA."
If MAIA appears with its logo, click on it to proceed.
If MAIA doesn’t appear
If MAIA does not show up in the search results, contact a MAIA admin the admin should do the steps in Picture 1, then the Application should show up here. It might take a minute or two.

Navigating to Permissions in Microsoft Azure
Open Application Security Settings:
Within the MAIA SharePoint Integration application settings in Microsoft Azure, expand the Security tab (marked by the red box on the left).
2. Select Permissions:
Click on Permissions (indicated by marker 1) under the Security tab. This will allow you to manage permissions required by the application.

Granting Admin Consent for Required Permissions
Grant Admin Consent:
In the Permissions section, click on Grant admin consent for your organization (e.g., for "Prodlane," as shown in the image, marked by marker 1).
Permissions Explanation:
offline_access (delegated): Allows the application to refresh user tokens, preventing users from needing to sign in repeatedly.
Organization.Read.All (delegated): Provides read-only access to the company SharePoint name.
Sites.Read.All (delegated and application):
Delegated permission lets the app see which users have access to specific files.
Application permission enables pre-processing of files for MAIA, so users can work with them seamlessly after processing.

Accepting Permissions for MAIA SharePoint Integration
Grant Admin Consent:
After clicking Grant admin consent (as shown in previous instructions), a redirection window will pop up (displayed on the right side of the image).
Accept Permissions:
In this pop-up window, review the requested permissions, then click on Accept (marked as 1). This grants MAIA the necessary permissions to integrate with SharePoint.

Verifying Permission Status
Refresh and Confirm:
After a few minutes, refresh the page. The Permissions section should now display all required permissions as “Granted by admin consent,” indicating that the setup is complete.
Permissions List:
Confirm that permissions like offline_access, Organization.Read.All, and Sites.Read.All are present and marked as “Admin consent.” If so, the integration is fully activated, and MAIA is ready to use with SharePoint.

Verifying SharePoint Site Connection in MAIA
Admin View in MAIA:
An admin in MAIA should now see the Integrations screen, which confirms that the SharePoint integration has been activated for the workspace.
Connecting Available Sites:
You will only be able to connect SharePoint sites that you have access to directly.
However, you may also see additional sites if someone from a site you don’t normally have access to has shared a file with you. In such cases, you will only see the specific file and the name of that SharePoint site.
