- Navigate to Spaces > Connections > Microsoft
- Acknowledge dust access to your Microsoft data
- Login to your microsoft account and authorise permission. Only organisational accounts are supported, not personal ones. NB : If you’re not an admin on your Microsoft workspace, will have to ask your administrator to consent Dust permissions for you. Once you clicked on “Request Admin consent”, you will have to wait for the administrator to validate your request in their Azure admin panel (nb : this might take a few minutes before showing up on the Azure admin panel)Once authorised, perform step 3 again. This time around, the connection will finalize.
- You can now select the data you want to synchronise with Dust :
Entra ID details
Alternative setup outside of DustEntra admins can also decide to create the application in Entra themselves, and will need the following consent URL :
Managing permissions
- You should use a dedicated microsoft account (eg. dust-account@yourdomain.com) to manage permissions for Dust. This will dictate which sites are visible to the connection in Dust.
- All Public Sharepoint sites and groups will be seen
- All Private Sharepoint sites where the dedicated microsoft account is “Member” or more will be seen in the Microsoft connection
- All Teams channels that the microsoft account is part of (Standard, Shared and Private) will be seen in the Microsoft connection
- The dedicated microsoft account needs read permission on the files. All files and documents visible by the user will be available for Dust.
Group memberships in SharepointIn Sharepoint, access in not always granted by direct addition of the Microsoft account to the member list of the Sharepoint site/group, and is often inherited from group memberships.
Make sure that you review the groups that dust-account@yourdomain.com belongs to, in order to tightly control what the Dust connection will be able to see
You can also use a Service Principal to login : fill in your tenant ID, client ID, the secret to use, and optionally the list of sites your service principal has access to, if you’re using the
Sites.Selected permission.
Step 1 : Create an App Registration in Entra with the following Application permissions on the Microsoft Graph API
Use the following URL as redirect URI : https://dust.tt/oauth/microsoft/finalize or https://eu.dust.tt/oauth/microsoft/finalize
And Grant admin consent for these permissions
Step 2 : In Security & Credentials, create a secret
Step 3 : Fill in the details in Dust
Tenant ID : Directory (tenant) ID from Step 1
Client ID : Application (client) ID from Step 1
Service Account secret : Secret Value from Step 2
Selected SharePoint site(Optional) : Site IDs from Step 6, one per line
NB : In Sharepoint admin, you will need to Select the Sites that your app has access to. Check out the Microsoft documentation
This is usually done by API or Powershell using the
Grant-PnpAzureADAppSitePermission command. Check out the Microsoft documentation
A synchronization happens every 5 minutes. All files created, modified or deleted during this period will not be updated immediately, but changes will be reflected only once a new synchronization is executed.
If a lot of files have been added or modified, the synchronization will take longer time.