Sharepoint Integration

The Sharepoint block allows you to create folders and upload files to your Sharepoint document library directly from your Checkbox application. With this block, you can easily manage your Sharepoint files without the need for any coding.

Required Permissions for the Sharepoint (MS Graph) Integration

The Checkbox Sharepoint integration uses Microsoft Graph with the following permissions:

• 'Sites.ReadWrite.All'
• 'offline_access'
• 'user.read'

Note: The Sites.ReadWrite.All permission is delegated which means that it is only "on behalf of the signed-in user". It does not give Checkbox access to the entire SharePoint environment - access is limited by the user's existing permissions. Typically, it is best practice to set up a dedicated SharePoint service account. This account only has access to the folders/sites needed for the integration.

Documentation: https://learn.microsoft.com/en-us/graph/permissions-reference

Sites.ReadWrite.All

Edit or delete items in all site collections

Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user.

Setting up your Sharepoint integration

1. Click on your name and select the ‘Account Settings’ menu item.
2. Click on ‘Integrations’ in the left sidebar.
3. Click on the Sharepoint card to bring up the configuration settings.
4. Click on the ‘Add account’ button.
5. A new window will pop up, prompting you to log into your Microsoft account or to “Allow” Checkbox access
6. Once this is complete, you will be redirected back to Checkbox and your Sharepoint integration is now setup.

Admin Account Requirement Error

In some cases, a “Need Admin Approval” error may occur when a regular user attempts to setup the Checkbox <> Sharepoint integration.

The error is caused by User permission settings in corporate MS Azure Active Directory; specifically, the option “User can consent to apps accessing company data on their behalf” is set to “No”, along with its derivative setting for accessing the groups’ data.

These settings can be found in All services -> Enterprise applications -> User settings in MS Azure Active Directory.

Here is how to resolve this error:

Add delegated permission for Checkbox via MS Azure AD

1. Log in to MS Azure AD https://portal.azure.com with Admin credentials
2. Azure AD -> App Registrations -> Checkbox App
3. Click API Permissions and "Add a permission"
4. Select "Microsoft Graph"
5. Choose "Delegated Permissions" and select Sites.ReadWrite.All
6. On the same API Permissions page, click "Grant admin consent for [Your Company]
7. Confirm "Yes"
8. After this, individual users should be able to setup Checkbox <> Sharepoint integration

Create Folder

The Create Folder function allows you to create a new folder in your Sharepoint document library. To use this function, simply specify the name of the new folder, and the path to the location where you want to create it.

Upload File to Folder

The Upload File to Folder function allows you to upload a file to a specified folder in your Sharepoint document library. To use this function, simply specify the name of the file you want to upload, the path to the folder where you want to upload it, and the file itself.

Examples

Here are a few examples of how you can use the Sharepoint block:

1. Automate document management - For example, you can use the Create Folder function to create a new folder for each new project or assessment, and the Upload File to Folder function to automatically upload relevant files to their respective folders.
2. Streamline HR processes - You can use the Sharepoint block to streamline HR processes such as employee onboarding. For instance, you can use the Create Folder function to create a new folder for each new employee, and the Upload File to Folder function to upload relevant documents such as contracts, agreements, and certificates to the employee's folder.

If you have any questions or feedback, please don't hesitate to get in touch with our support team.