Sharepoint Permissions

[silverburst]

Hello everyone, 

I'm trying to connect to Sharepoint - I receive the following:

I subsequently reached out to the SP and they wanted some technical information such as permissions, how the integration works, etc. 

Does anyone know where the technical documentation sits/resides? Any help would be greatly appreciated. 

I forgot to add, it would be helpful to also understand if there's any differences with Server

[DanM]

@silverburst  We don't have specific documentation on how the tool connects to Sharepoint. I would suggest opening a ticket with Support so they can work with your Sharepoint admin on specifics and what permissions are needed. Server will act the same as long as the Run As user on the server has access to Sharepoint like you would. 

[silverburst]

Bummer! we may just see how it connects to a dev environment to see what permissions need to be released

[leofrancia]

Hey @silverburst, I just came across this and found this article: https://community.alteryx.com/t5/Alteryx-Designer-Desktop-Knowledge-Base/Understanding-Azure-Applica... --> Last point "Understanding Admin Consent"

Thought of bumping this thread in case you still have it open from your side.

[caltang]

I'm actually facing this issue as well. I've reached out to Alteryx support and we're working out the details, but they have pointed us to the documentation link that @leofrancia shared as well. 

Would be great if we have a more standard approach... users do end up getting turned off by this block. 

[leofrancia]

Hi @caltang, the error seems to be based on the security settings in SharePoint; i.e. the less permissive the policies of the org, the higher the likelihood of having issues like this. I have also encountered it in an engagement.

Question for you  - did the steps in the guide help you resolve the issue or was there anything else you think worth covering in the guide?  

[caltang]

Hi @leofrancia,

We're in the midst of troubleshooting it, and right now, it seems we've settled for not having the option to sign in via browser for any of the Connector Tools simply because of Alteryx's ability to read all/write all in the Apps under Azure end as per the documentation. Still working on what's next.

I think what would be great to be added is how we can better translate this problem to IT / Azure teams. We often face the problem of actually understanding what we want - and just asking for access like that seems a bit off. Would be great if we can have some guides on that specifically, because most of the time, Alteryx users are from non-IT backend teams...

Just my 2 cents. Thanks for asking, by the way!

[leofrancia]

Thanks, @caltang. I will update you on how I go with my engagement. I agree that saying "we need more access" can lead more to questions than answers.

[silverburst]

Thanks so much for responding - will take a look and pass it along - appreciate it!

[leofrancia]

Hey, everyone. It looks like I am derailing the topic but would like to share an alternative approach. Have you considered SharePoint file sync with Files On-Demand (https://support.microsoft.com/en-us/office/sync-files-with-files-on-demand-88d0ebed-bbd7-4d00-8c1c-0...)?

Reasons I am suggesting this:

1. The SharePoint input tool can run longer due to the complexity of the function (API, file extract, processing, etc.).

2. The SharePoint input authorization concepts, whether the browser or app sign-in requires authorization which may not be assigned to the user. This concept applies to any application that does integration anyway.

3. The SharePoint input tool processes structured data files only.

4. Files On-Demand does not copy the files to locally to your PC.

5. Since Files On-Demand uses native Windows integration with SharePoint, there are less dependencies leading to overall faster execution.

I am not suggesting doing away with the SharePoint input tool completely. It is a very convenient tool for structured files if required SharePoint authorizations and settings are present.

How to do the alternative solution:

1.  Set up SharePoint Files On-Demand in the relevant directory.

2. Locate the files to use them via standard tools such as Input Data (and wildcards) and Dynamic Input.