How to configure the SharePoint integration for evidence or policy generation

1. Connecting SharePoint

This section should be undertaken from the Complyance app by an internal IT Admin with the requisite SharePoint permissions.

1. Make sure you are logged in to Complyance as an Admin or a user with permission to manage integration connectors.
2. Go to organization settings and open the Integrations tab.
3. Find the SharePoint integration card and click Connect.

4. You will be prompted to install the Complyance SharePoint application to your Azure AD. The following permissions are required for the app to function properly:

• Delegated permissions:
  • Sign in and read user profile – required for user sign-in.
• Application permissions:
  • Access selected Lists without a signed in user - allows the Complyance app to sync files in SharePoint lists (e.g., Document Libraries) with granted read-only permissions without requiring a signed-in user.

  • Access selected site collections - allows the Complyance app to sync files in SharePoint sites with granted read-only permissions without requiring a signed-in user.

     

    

5. Click Accept to complete the integration connection.

2. Granting access to sites

This section should be undertaken by an IT Admin that has admin control over the SharePoint Site.

The instructions in this section are for granting read-only access to one SharePoint site. These steps need to be performed for each SharePoint site from which files will be synced.

1. Go to Microsoft Graph Explorer: https://developer.microsoft.com/en-us/graph/graph-explorer. Click on the login button in the top-right corner and login as the user with admin control over the SharePoint site.

    

   

2. First Microsoft Graph Explorer needs permission to modify sites. To grant this permission, complete the following steps:
   • In the top-right corner, click on your avatar, then click the Consent to permissions link in the popup.
     

   • In the Permissions drawer that opens, find the Sites.FullControl.All permission and click the Consent button.

     

3. Given a SharePoint site with the following URL: https://acme-corp.sharepoint.com/sites/ComplyanceSharepointIntegration. Construct a URL with the following format: https://graph.microsoft.com/v1.0/sites/acme-corp.sharepoint.com:/sites/ComplyanceSharepointIntegration:/permissions
   • Steps to transform the original SharePoint URL:

• Remove the https:// prefix: acme-corp.sharepoint.com/sites/ComplyanceSharepointIntegration
• Insert a colon between .com and /: acme-corp.sharepoint.com:/sites/ComplyanceSharepointIntegration
• Add the prefix https://graph.microsoft.com/v1.0/sites/: https://graph.microsoft.com/v1.0/sites/acme-corp.sharepoint.com:/sites/ComplyanceSharepointIntegration
• Add the suffix :/permissions: https://graph.microsoft.com/v1.0/sites/acme-corp.sharepoint.com:/sites/ComplyanceSharepointIntegration:/permissions

• After that: 
  • Change the request method to POST.
  • Paste the final constructed URL into the query input.
  • Paste the following payload into the Request body tab:

    • {
          "roles": [
              "read"
          ],
          "grantedToIdentities": [
              {
                  "application": {
                      "id": "6c382c8c-f13d-41b6-a39e-3911074374a5",
                      "displayName": "Complyance SharePoint Integration"
                  }
              }
          ]
      }

  • Click Run query and confirm that the permission was successfully created

3. Adding evidence integrations

Once steps 1 and 2 have been completed, step 3 may be complete by any internal team member. 

1. Go to one of the SharePoint sites where the Complyance SharePoint app has been granted access, and click the Share button next to the file that needs to be synced.

   

2. In the Share dialog, click Copy link.

   

3. Then log in to the Complyance app as a user who meets one of the following criteria:
   1. has permission to manage evidence integrations
   2. is the owner of the evidence
   3. is a user with whom the evidence has been shared
   4. is the owner of the control linked to the evidence
4. Go to the evidence item to be integrated with SharePoint.
5. Select the Integrations tab.
6. Find the SharePoint integration card and click Configure.

7. Paste the file share link you copied earlier into the New file share link input and click Save.

   

8. If everything went well, you should see the file name that will be synced displayed under the Selected file label.