Required App Registrations

For the Custom Connector to work with SharePoint and tia® Connect, the following App Registrations need to be created.

App Registrations for metadata and file content (global access)

Must be provided by the customer.

For access from SharePoint the following API permissions are required:

These are global Permissions, you can limit the access to individual sites. see Required App Registrations

API	Permission	Type	Description

API	Permission	Type	Description
`Microsoft Graph`	`Sites.FullControl.All`	Application	Have full control of all site collections
`SharePoint`	`Sites.ReadWrite.All`	Application	Read and write items in all site collections

App Registrations for metadata and file content (sites selected)

Must be provided by the customer.

API	Permission	Type	Description

API	Permission	Type	Description
`Microsoft Graph`	`Sites.Selected`	Application	Have full control of selected site collections
`SharePoint`	`Sites.Selected`	Application	Read and write items in selected site collections

The permission requires further configuration: https://devblogs.microsoft.com/microsoft365dev/controlling-app-access-on-specific-sharepoint-site-collections/

Use the e.g. Microsoft Graph Explorer or Postman to send this request with for sites that should use tia® Connect:

  POST https://graph.microsoft.com/v1.0/sites/<siteId>/permissions

Content-Type: application/json

{
  "roles": ["fullcontrol"],
  "grantedToIdentities": [{
    "application": {
      "id": "<ClientId>",
      "displayName": "<AppRegistration Name>"
    }
  }]
}

the site id can be found out see Required App Registrations

App Registrations for communication with tia® Connect via Browser/ Custom Connector

API	Permission	Type	Description

API	Permission	Type	Description
`tia Sharepoint`	`write-archive`	Application	write-archive

Findout SITE ID

Weg 1

The Site name can be found with Graph API, too:

https://graph.microsoft.com/v1.0/sites?search=<SiteName>&$select=id

The result contains the siteId:

{
    "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#sites(id)",
    "value": [
        {
            "id": "<siteId>
        }
    ]
}

Weg 2

Enter sharepoint-Seite.
take URL from browser page. (e.g.: https://kgssoftware.sharepoint.com/sites/MeinSharepointTest)
- you get the
  - host: kgssoftware.sharepoint.com
  - site: MeinSharepointTest
create get request url: https://graph-microsoft.com/v1.0/sites/<host>:/sites/<site>
- e.g.: https://graph.microsoft.com/v1.0/sites/kgssoftware.sharepoint.com:/sites/MeinSharepointTest
resultiert in einer Antwort wie
{ "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#sites/$entity", "createdDateTime": "2025-04-22T11:22:57.677Z", "description": "MeinSharepointTest", "id": "kgssoftware.sharepoint.com,ad1e5dbd-baea-447f-bb3f-4bc3fdd68e47,aaa27814-c19c-438b-adae-272b91520a5d", "lastModifiedDateTime": "2025-07-23T08:57:28Z", "name": "MeinSharepointTest", "webUrl": "https://kgssoftware.sharepoint.com/sites/MeinSharepointTest", "displayName": "MeinSharepointTest", "root": {}, "siteCollection": { "hostname": "kgssoftware.sharepoint.com" } }
in id steht dann die site id.