Community Spring Cleaning week is here! Join your fellow Maveryx in digging through your old posts and marking comments on them as solved. Learn more here!

Alteryx Designer Desktop Discussions

Find answers, ask questions, and share expertise about Alteryx Designer Desktop and Intelligence Suite.

Sharepoint List Tool - Authentication issue

lcrosby
7 - Meteor

Hi,

 

We've been working with our Technical Services team to establish a connection between Alteryx and our institution's Sharepoint, using the Sharepoint List input/output tools. 

 

Between the documentation for the tool from Alteryx and the Microsoft documentation for setting up application authentication, we're running into an 'Access Denied' issue as below:

Untitled.png

 

We are wanting to set up an App-Only connection using a client-ID and secret key, we have set this up in a test environment using 

 
We are not entirely clear what exactly the App Domain and Redirect URL should be in our context, eg;

Screenshot 2020-10-16 182750.png
would this be www.{site}.sharepoint.com or are we totally getting the wrong-end-of-the-stick?
 
Also, when entering the XML permissions on the admin side, if anyone has clarity on what the scope URI format should be exactly, we've tried various combinations with our Tech Services team and come up with the same Access Denied error in Alteryx. For example;
 

Screenshot 2020-10-16 183000.png 

should the scope be something along the lines of https://{site}.sharepoint.com/site/{sitename}/content/web , does anyone know if this is the correct format?
 
Sorry to be so vague, we can't really pin down exactly what the error is except we're suspecting it's something to do with authentication and the syntax of these values. Any help at all would be greatly appreciated!
 
Thanks,
Leon
2 REPLIES 2
joshuaburkhow
ACE Emeritus
ACE Emeritus

Hey @lcrosby 

 

I agree that Microsoft documentation isn't exactly useful here. I am wondering about the same thing as I haven't connected app-only. Please let me know if you find something new!

Joshua Burkhow - Alteryx Ace | Global Alteryx Architect @PwC | Blogger @ AlterTricks
lcrosby
7 - Meteor

Hi @joshuaburkhow,

 

Just an update - with some wrangling with our Tech Services dept. we finally figured this out. It's not a perfect solution as it's using a slightly older method of connecting but one that Microsoft still support.

 

The main issue we were having is making sure we were requesting and granting app permissions in Sharepoint at the right level. All this can be administered at the site level. So if you want to give Alteryx access to a particular list in SharePoint, for example, you can do the following;

 

goto: https://{your domain}.sharepoint.com/sites/{your site}/_layouts/15/appregnew.aspx

 

here you can generate a client ID and secret key. URLs for domain and re-direct can just be entered as www.localhost.com and https://www.localhost.com respectively.

 

Next, a site owner needs to goto: https://{your domain}.sharepoint.com/sites/{your site}/_layouts/15/appinv.aspx

 

Here they can authorise and set permissions, in the XML permissions, after a lot of searching, we figured out the following will give access to list objects;

 

<AppPermissionRequests AllowAppOnlyPolicy="true">
<AppPermissionRequest Scope="http://sharepoint/content/sitecollection/web/list" Right="Write" />
</AppPermissionRequests>
 
Once they confirm that, they'll be asked what specific list they want to give the app access to and that's it done!

Hopefully that's useful.
 
Thanks,
Leon
Labels