Challenges in isolating permissions solely to SharePoint to connect with Uipath

Help Studio
, ,
1

Hello All,

Currently, my task is to upload files to the SharePoint folder. We have the activities in UiPath to achieve the task, but i am getting an error asking me to contact Admin for permission. Admin requested me to give him specific list of permission which i need for pushing the file and to create folder as the current SharePoint folder has sensitive data and they don’t want to assign many permissions. I gave them below list,
The image lists permissions related to files and sites, including various read and write levels for each. (Captioned by AI)

Ideally, I’d like to get access only to OneDrive and SharePoint for the user account. However, i am encountering challenges in isolating permissions solely to SharePoint. The current approach inadvertently grants access to other applications like Outlook and Teams.

Anyone has idea on how to fix the above problem?

2

@Reddy_Chinthala_GlovisUSA

If you give only file levwl permissions in azure app thenyou would not be able toa ccess mail and all…

Cheers

3

Right, Its okay if we are not able to access any mails and all. Our goal is to isolating permissions solely to SharePoint. Any thoughts on how to achieve the task?

4

@Reddy_Chinthala_GlovisUSA

In azure app give the permissions that are there in your screenshot

Then at security group level we can control individual user or bot accounts for individual sharepoints sites

Cheers

5

Nice, good to hear that there is a solution. Thank you @Anil_G , Do you have any links to UiPath or Microsoft documents regarding this point “Then at security group level we can control individual user or bot accounts for individual sharepoints sites”.

Okay.

When i read the above document on connecting UiPath to sharepoint using azure ad, there are two in Azure AD, one is “App registration” and second one is “Enterprise application”.

What should i go with when i am using community edition and what should i use when i am using license version of UiPath and Azure AD

6

@Reddy_Chinthala_GlovisUSA

This is the link you need to use to crwate app…and options you have are app scope and delegated…better to use app scope for unattended

Then security group level addition is at azure app level and not at yhe UiPath level…you can check there

Cheers