Skip to main content
You’ll create: an app registration in Microsoft Entra ID (formerly Azure Active Directory). We’ll be able to read: sites and files the connecting user can already open in Microsoft 365, using delegated Microsoft Graph permissions.

​
Steps

1

Register the app

Go to entra.microsoft.com and sign in as an Entra admin.Navigate to Applications → App registrations → New registration and name it (for example, “Voltai SharePoint”).For Supported account types, pick Accounts in this organizational directory only (single tenant) unless you need to support guest tenants.Under Redirect URI, choose the Web platform and paste the redirect URI. Click Register.
The platform must be Web, not “Single-page application” or “Mobile and desktop”. Anything else produces AADSTS500113: No reply address is registered for the application.
2

Add Microsoft Graph delegated permissions

Open API permissions → Add a permission → Microsoft Graph → Delegated permissions, and add:
  • Sites.Read.All
  • Files.Read.All
  • offline_access
Then click Grant admin consent for <your tenant> so each user does not have to consent individually.
3

Create a client secret

Open Certificates & secrets → Client secrets → New client secret.Pick a reasonable expiry (12–24 months) and copy the Value immediately — Entra shows it only once.
4

Copy the IDs

On the Overview page, copy the Application (client) ID and the Directory (tenant) ID.

​
Send us

tenant_id is optional but strongly recommended. Without it we fall back to common, which only works if you allowed multi-tenant accounts.

​
Things to know

  • These are delegated permissions. Despite the .All suffix, they never exceed what the signed-in user can already open — see Security and architecture.
  • Client secrets always expire in Entra ID. Set a calendar reminder and send us a replacement before the old one lapses, otherwise every user’s connection fails at the same moment.