Not able to read the files and folders from sharepoint

[vishal_nachankar (Visky)]

Hi all,

I am not able to read the file and folders from the sharepoint site. I am getting the below error while accessing it. I have all the details correct the tenant id, application and cilent secret also the permission are granted refer the screenshot.

Error message:
Find Files And Folders: Code: AccessDenied
Message: Either scp or roles claim need to be present in the token.
Inner error:
AdditionalData:
date: 2025-01-21T07:04:29
request-id: dd57062a-980b-4280-a7b4-fa064ca66dd1
client-request-id: dd57062a-980b-4280-a7b4-fa064ca66dd1
ClientRequestId: dd57062a-980b-4280-a7b4-fa064ca66dd1

[sonaliaggarwal47 (Sonali Aggarwal)]

Hi @vishal_nachankar,

Can you please share details on which authentication type you are using to connect to sharepoint using Microsoft O365 package?

I think Delegate access won’t work for you and you might need application access.

Also sharing few thread from similar error, please follow the steps mentioned in these posts:

Office 365 Activities permission

Hello we have installed UiPath MicrosoftOffice365 newest activities package. Also we have created Azure Application according to instructions. Redirect uri, secret, all API permissions are given, also admin has consented to all of them. When using IntergratedWindowsAuth it works and I am able to use FindFilesAndFolders and CreateFolder activity in Sharepoint. But We must use Office 365 scope where we authenticate via ApplicationAndSecret and it does not work. All variables are created according …

Microsoft 365 Scope ‘Find Files And Folders’ giving AccessDenied Message: Either scp or roles claim need to be present in the token

Had this issue and got it sorted by doing the following: Make sure the App Permissions in azure is from the Application permissions, not the Delegate permissions because we require Unattended access Application permission set so it works for me: Files.Read.All Files.ReadWrite.All Sites.Manage.All Sites.Read.All Sites.ReadWrite.All

Regards
Sonali

[Anil_G (Anil Gorthi)]

@vishal_nachankar

as per error , Application scope is what you for the file access…

cheers

[vishal_nachankar (Visky)]

Using application id and secret for authentication type

[vishal_nachankar (Visky)]

sorry can you please explain?

[Anil_G (Anil Gorthi)]

@vishal_nachankar

In the screenshot …second column says delegated…it should say application

Cheers

[vishal_nachankar (Visky)]

any reason why it should be application only? just curious to know the reason so that i can explain the same to the IT team of azure of my cilent

[Anil_G (Anil Gorthi)]

@vishal_nachankar

Delegated are user specific permissions…when used with 3rd party applications with client id and secret user cannot authenticate so application scope is to be used

Activities - How to connect to Microsoft 365 activities

Cheers

[vishal_nachankar (Visky)]

as per IT they can provide only delegated type of access only for the application

[Anil_G (Anil Gorthi)]

@vishal_nachankar

then change your authentication type from client id secret to others

please check for more info

Either SCP Or Role Claim Need To Be Present In The Token [Microsoft Office 365]

How to fix "Either SCP or role claim need to be present in the token"? Issue Description: When using Application ID and Secret or Application ID and Certificate from Office 365 Scope, the following error is thrown when trying to authenticate [image] Full Error In Text: Code: AccessDenied Message: Either scp or role claim need to be present in the token Root Cause: No permissions are added to the Azure App Registration. Resolution: Go to Azure -> App Registrations -> Select your App…

cheers

[vishal_nachankar (Visky)]

tried with authentication type as username and password but getting below error Find Files And Folders: Code: generalException
Message: An error occurred sending the request.

[Anil_G (Anil Gorthi)]

@vishal_nachankar

open exceptions details from locals panel you would see the actual exception there

cheers

[vishal_nachankar (Visky)]

RemoteException wrapping Microsoft.Graph.ServiceException: Code: generalException
Message: An error occurred sending the request.
—> RemoteException wrapping Microsoft.Identity.Client.MsalUiRequiredException: AADSTS50076: Due to a configuration change made by your administrator,
or because you moved to a new location,
you must use multi-factor authentication to access ‘00000003-0000-0000-c000-000000000000’. Trace ID: e3356654-13a3-4286-94f5-216324ac5400 Correlation ID: a194e8ae-56d0-40a1-96e2-82949052abf3 Timestamp: 2025-01-22 07:01:37Z
at Microsoft.Identity.Client.OAuth2.OAuth2Client.ThrowServerException(HttpResponse response,
RequestContext requestContext)
at Microsoft.Identity.Client.OAuth2.OAuth2Client.CreateResponse[T](HttpResponse response,
RequestContext requestContext)
at Microsoft.Identity.Client.OAuth2.OAuth2Client.d__111.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.OAuth2.OAuth2Client.<GetTokenAsync>d__10.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.OAuth2.TokenClient.<SendHttpAndClearTelemetryAsync>d__10.MoveNext() --- End of stack trace from previous location where exception was thrown --- at Microsoft.Identity.Client.OAuth2.TokenClient.<SendHttpAndClearTelemetryAsync>d__10.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.OAuth2.TokenClient.<SendTokenRequestAsync>d__5.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Internal.Requests.UsernamePasswordRequest.<ExecuteAsync>d__3.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Internal.Requests.RequestBase.<RunAsync>d__12.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.ApiConfig.Executors.PublicClientExecutor.<ExecuteAsync>d__5.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at UiPath.Shared.Authentication.Microsoft.Services.MsalLogonService.<AuthenticateInternalAsync>d__11.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at UiPath.Shared.Authentication.Microsoft.Services.MsalLogonService.<AuthenticateAsync>d__8.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at UiPath.Shared.Services.Graph.GraphClientServiceFactory.<TimeoutAfter>d__191.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at UiPath.Shared.Services.Graph.GraphClientServiceFactory.d__15.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at UiPath.Shared.Services.Graph.GraphClientServiceFactory.d__25.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at UiPath.Shared.Services.Graph.GraphClientServiceFactory.d__13.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at UiPath.Shared.Authentication.Microsoft.Extensions.HttpRequestMessageExtensions.d__4.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Graph.AuthenticationHandler.d__16.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Net.Http.HttpClient.d__58.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Graph.SimpleHttpProvider.d__13.MoveNext()
— End of inner exception stack trace —
at Microsoft.Graph.SimpleHttpProvider.d__13.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Graph.SimpleHttpProvider.d__10.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Graph.BaseRequest.d__40.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Graph.BaseRequest.d__341.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Graph.SiteRequest.<GetAsync>d__5.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task) at UiPath.MicrosoftOffice365.Files.Extensions.FilesExtensions.<FindFilesAndFoldersAsync>d__36.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at UiPath.MicrosoftOffice365.Activities.Files.FindFilesAndFolders.<ExecuteAsync>d__32.MoveNext() --- End of stack trace from previous location where exception was thrown --- at UiPath.Shared.Activities.AsyncTaskCodeActivityImplementation.EndExecute(AsyncCodeActivityContext context, IAsyncResult result) at UiPath.Shared.Activities.AsyncTaskCodeActivity.EndExecute(AsyncCodeActivityContext context, IAsyncResult result) at UiPath.Shared.Activities.ContinuableAsyncCodeActivity.EndExecute(AsyncCodeActivityContext context, IAsyncResult result) at UiPath.MicrosoftOffice365.Activities.Office365BaseClientActivity.EndExecute(AsyncCodeActivityContext context, IAsyncResult result) at UiPath.MicrosoftOffice365.Activities.Office365ClientActivity2.EndExecute(AsyncCodeActivityContext context,
IAsyncResult result)
at System.Activities.AsyncCodeActivity.System.Activities.IAsyncCodeActivity.FinishExecution(AsyncCodeActivityContext context,
IAsyncResult result)
at System.Activities.AsyncCodeActivity.CompleteAsyncCodeActivityData.CompleteAsyncCodeActivityWorkItem.Execute(ActivityExecutor executor,
BookmarkManager bookmarkManager)

[Anil_G (Anil Gorthi)]

@vishal_nachankar

RemoteException wrapping Microsoft.Identity.Client.MsalUiRequiredException: AADSTS50076: Due to a configuration change made by your administrator,
or because you moved to a new location,
you must use multi-factor authentication to access

@vishal_nachankar

as per errors looks like mfa is enabled and when it is enabled username and password cannot be used…shift to interactive token

cheers

[vishal_nachankar (Visky)]

Tried with Interactive token as well getting below error

[Anil_G (Anil Gorthi)]

@vishal_nachankar

Error is clear your admin needs to provide you access

The link provided above has all details…i would suggest provide it to your admin so that he can look into it and give the best option as per your organization rules

Cheers