Microsoft SharePoint | Atomicwork

Microsoft SharePoint: Permissions and setup

This is an article about setting up the integration. To find out how you can train Atom on SharePoint documents, please go here.

Permissions

To connect your Atomicwork and Microsoft SharePoint accounts, you need:

Atomicwork admin access: You need org admin access in Atomicwork.
Microsoft Entra access.

Permission	Description	Usecase
Group.Read.All	Read all groups	Required to know which groups have access to which sites and files
GroupMember.Read.All	Read all group memberships	Required to know which groups have access to which sites and files
Sites.FullControl.All	Have full control of all site applications	Required to make sure Atom can read from all SharePoint sites, regardless of group type.
Sites.Read.All	Read items in site collections	Required to access content
Sites.ReadWrite.All	Read and write items in all site collections	[OPTIONAL] Required for a WIP capability where Atom can make updates to content, based on user suggestions. This permission can be removed after installation.
User.Read	Sign in and read user profile	Required to understand user access permissions
User.Read.All	Read all users’ profiles	Required for fine-grained access based on user profiles

Setup

We recommend connecting with a service account — a non-human Microsoft 365 account used by integrations and automated processes to access resources like SharePoint, rather than being tied to an individual person. Using one keeps the connection stable even as people join or leave.

Video: vimeo 1127259842

As an Atomicwork admin, go to Settings > Enterprise integrations > App store > Microsoft SharePoint, and click Connect.
Click Enable to access a page that displays the permissions Atomicwork needs to successfully leverage the integration.
Click Accept.