Skip to content
English - United States
  • There are no suggestions because the search field is empty.

SharePoint Approval Process and Security Information

The RocketDocs - SharePoint integration was created as a Multi-tenant app registration in Microsoft.

⚠️IMPORTANT: These steps can only be completed by a Microsoft Admin for your company.⚠️

 

Application Name: RocketDocs-SharePoint


📋Note:

Enter your unique tenant name in place of “tenant_name” in the link above.


 

2. Sign in using an account with administrative privileges.

3. Review and accept the requested permissions.

4. Once approved, this will grant both admin consent for SharePoint and user profile access, after which you will be redirected to your RocketDocs site.

The site permissions are:

  • Sites.ReadWrite.All

  • User.Read

 


⚠️IMPORTANT!⚠️

The RocketDocs SharePoint app only allows users to access SharePoint sites and files they have access to based on their Microsoft and RocketDocs permissions.


 

Key Security Notes:

In RocketDocs, we make use of the @azure/msal-browser, @azure/msal-react, and @microsoft/microsoft-graph-client libraries to handle auth token gathering in the frontend. The token is stored in Session storage and react state.

  • The frontend is where we handle token retrieval, but we pass that token to the dotnet backend as a header and use it with Azure.Identity OnBehalfOfCredential to enable us to use that user’s “identity” to access user sharepoint data via Microsoft Graph API from our server. Again, only accessing what the user has access to (we are using their OnBehalfOfCredentials). We then use Microsoft.Graph library with those credentials to handle the SharePoint actions.

  • Actions our backend can perform:

    • Get SharePoint sites.

    • Get SharePoint drives of a site.

    • Get SharePoint folders of a drive.

    • Upload a RocketDocs document to a SharePoint folder.