# Granting permissions in Microsoft Azure

> This guide offers step-by-step instructions on how to grant the appropriate permissions for our app-based sync method.

1. **Access the Microsoft Azure Portal**

   * Go to the following URL: <https://portal.azure.com/#view/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/~/AppAppsPreview>

2. **Search for MAIA:**

   * In the Enterprise Applications section, use the search field (indicated by the red box) to look for "MAIA."

   * If MAIA appears with its logo, click on it to proceed.

3. **If MAIA doesn’t appear**

   * If MAIA does not show up in the search results, contact a MAIA admin the admin should do the steps in Picture 1, then the Application should show up here. It might take a minute or two.

![](/images/docs/1c6d50f23c396b0fa85b.png)

***

## Navigating to permissions in Microsoft Azure

1. **Open Application Security Settings:**

   * Within the MAIA SharePoint Integration application settings in Microsoft Azure, expand the Security tab (marked by the red box on the left).

2\. **Select Permissions:**

* Click on Permissions (indicated by marker 1) under the Security tab. This will allow you to manage permissions required by the application.

![](/images/docs/ff4438a9aa640114cf67.png)

***

## Granting admin consent for required permissions

1. **Grant Admin Consent**:

   * In the **Permissions** section, click on **Grant admin consent** for your organization (e.g., for "Prodlane," as shown in the image, marked by marker 1).

2. **Permissions Explanation**:

   * **offline_access (delegated)**: Allows the application to refresh user tokens, preventing users from needing to sign in repeatedly.

   * **Organization.Read.All (delegated)**: Provides read-only access to the company SharePoint name.

   * **Sites.Read.All (delegated and application)**:

     * **Delegated** permission lets the app see which users have access to specific files.

     * **Application** permission enables pre-processing of files for MAIA, so users can work with them seamlessly after processing.

![](/images/docs/361803fc0e9c5b8ad3f3.png)

***

## Accepting permissions for MAIA SharePoint integration

1. **Grant Admin Consent**:

   * After clicking **Grant admin consent** (as shown in previous instructions), a **redirection window** will pop up (displayed on the right side of the image).

2. **Accept Permissions**:

   * In this pop-up window, review the requested permissions, then click on **Accept** (marked as 1). This grants MAIA the necessary permissions to integrate with SharePoint.

![](/images/docs/811e1a3982b4f2578620.png)

***

## Verifying permission status

1. **Refresh and Confirm**:

   * After a few minutes, refresh the page. The **Permissions** section should now display all required permissions as “Granted by admin consent,” indicating that the setup is complete.

2. **Permissions List**:

   * Confirm that permissions like **offline_access**, **Organization.Read.All**, and **Sites.Read.All** are present and marked as “Admin consent.” If so, the integration is fully activated, and MAIA is ready to use with SharePoint.

![](/images/docs/119d707e8e809e9db1bf.png)

***

## Verifying SharePoint site connection in MAIA

1. **Admin View in MAIA**:

   * An admin in MAIA should now see the **Integrations** screen, which confirms that the SharePoint integration has been activated for the workspace.

2. **Connecting Available Sites**:

   * You will only be able to connect SharePoint sites that you have access to directly.

   * However, you may also see additional sites if someone from a site you don’t normally have access to has shared a file with you. In such cases, you will only see the specific file and the name of that SharePoint site.

![](/images/docs/94aba2ed199d18dc8f61.png)