For the Custom Connector to work with SharePoint and tia tia® Connect, the following App Registrations need to be created.
App Registrations for metadata and file content (global)
For access from SharePoint the following API permissions are required:
| Info |
|---|
These are global Permissions, you can limit the access to individual sites. see https://kgs-software.atlassian.net/wiki/spaces/DOCUEN/pages/3645636737/Required+App+Registrations#App-Registrations-for-metadata-and-file-content-(sites) |
API | Permission | Type | Description | ||||
|---|---|---|---|---|---|---|---|
|
| Application | Read and write files in all site collections |
|
| Application | Have full control of all site collections |
|
| Application | Create, edit, and delete items and lists Read and write items in all site collections |
App Registrations for metadata and file content (sites)
API | Permission | Type | Description |
|---|---|---|---|
|
|
| Application |
Have full control of selected site collections |
Microsoft Graph
|
|
| Application | Read and write items in |
Microsoft Graph
User.Read
Delegated
Sign in and read user profile
SharePoint
Sites.Read.All
Application
Read items in all site collections
SharePoint
Sites.ReadWrite.All
Application
Read and write items in all site collections
...
selected site collections |
The permission requires further configuration: https://devblogs.microsoft.com/microsoft365dev/controlling-app-access-on-specific-sharepoint-site-collections/
Use the e.g. Microsoft Graph Explorer or Postman to send this request with for sites that should use tia® Connect:
| Code Block |
|---|
POST https://graph.microsoft.com/v1.0/sites/<siteId>/permissions
Content-Type: application/json
{
"roles": ["fullcontrol"],
"grantedToIdentities": [{
"application": {
"id": "<ClientId>",
"displayName": "<AppRegistration Name>"
}
}]
} |
The Site name can be found with Graph API, too:
| Code Block |
|---|
https://graph.microsoft.com/v1.0/sites?search=<SiteName>&$select=id |
The result contains the siteId:
| Code Block |
|---|
{
"@odata.context": "https://graph.microsoft.com/v1.0/$metadata#sites(id)",
"value": [
{
"id": "<siteId>
}
]
} |
App Registrations for communication with tia® Connect via the Custom Connector
API | Permission | Type | Description |
|---|---|---|---|
|
| Delegated | Maintain access to data you have given access to |
|
| Delegated | Sign in and read user profile |
|
| Application | write-archive |
...