Introduction

Sana Agents' SharePoint integration allows users to seamlessly access and manage SharePoint data directly within the Sana Agents platform. This integration enhances productivity by enabling users to retrieve, discuss, and share information stored in SharePoint without leaving the Sana environment.

Integration Capabilities

With the SharePoint integration, users can not only search for information within Sana Agents but also interact with SharePoint data directly. This includes retrieving documents, collaborating on shared files, and managing access permissions.

Type of Integration

Shared: Set up by an admin for a workspace or collection, with access managed in Sana Agents.

Availability

The integration is available in the Team and Enterprise tiers, ensuring flexibility and scalability for various organizational needs.

Scope and Permission

The integration requests the following scopes and permissions:

Graph API

email: Read users' primary email addresses.
Files.Read.All: Read all files the signed-in user can access.
openid: Sign in with work or school accounts and access basic user profile information.
Sites.Read.All: Read documents and list items in all site collections on behalf of the signed-in user.
User.Read.All: Sign in to the app and read the profile of signed-in users, including basic company information.
Group.Read.All: understand which groups the user is a member of and if they belong to the owners group for a SharePoint site

Managing Access

The integration has access to all the sites and files that the user has access to. If you want to manage this in Microsoft Azure, we suggest this approach that ensures the principle of least-privilege:

In the Azure Portal, create a user with 'Guest' role (this will ensure that it will not be part of any site unless specified).
In Sharepoint, add the user with the role 'Member' to the sites that it needs access to.
Add the SharePoint integration to Sana AI with the created user.

With this approach, Sana Agents still has the required permissions to call the needed Microsoft Graph API endpoints without excessive access to the organization’s SharePoint data.

Integration Setup

To integrate Sana Agents with SharePoint, whether for individual or shared use, follow these steps:

Sign in to your Sana Agents account.
Navigate to the Integrations section of the platform.
Click on Microsoft SharePoint and select Connect shared.
Follow the prompts to authorize Sana Agents to access your SharePoint data.
If you are a SharePoint administrator, select “Consent on behalf of your organization” to allow any user within your organization to connect the integration. If you are a user, contact your Microsoft administrator to request access.

For a shared SharePoint integration, additional steps are required:

After connecting, navigate to the 'Shared Integrations' section and select your SharePoint integration to adjust settings.
Open a separate browser tab to navigate to your SharePoint and copy the URL of the site or folder you want to import to Sana (ensure to copy the browser URL, not a sharing link URL).

Valid URL formats:
- Valid URL formats:
  - Root site
    * https://<company-domain>.sharepoint.com
    * https://<company-domain>.sharepoint.com/SitePages/Home.aspx
    * https://<company-domain>.sharepoint.com/sites/<site-name>
    *https://<company-domain>.sharepoint.com/sites/<site-name>/SitePages/CollabHome.aspx
  - Document library
    *https://<company-domain>.sharepoint.com/<document-library-name>/Forms/AllItems.aspx
    *https://<company-domain>.sharepoint.com/sites/<site-name>/<document-library-name>
  - Folder within document library
    -https://<company-domain>.sharepoint.com/<document-library-name>/Forms/AllItems.aspx?...&id=%2F<document-library-name>%2F<path-to-folder>&...
    *https://<company-domain>.sharepoint.com/sites/<site-name>/<document-library-name>?...&id=%2Fsites%2F<site-name>%2F<document-library-name>%2F<path-to-folder>&...
  - Microsoft Office file within document library
    *https://<company-domain>.sharepoint.com/:w:/r/_layouts/15/Doc.aspx?sourcedoc=%7B<file-id>%7D&file=<file-name>&...
    *https://<company-domain>.sharepoint.com/:w:/r/sites/<site-name>/_layouts/15/Doc.aspx?sourcedoc=%7B<dile-id>%7D&file=<file-name>&...
  - Non Microsoft Office file within document library
    *https://<company-domain>.sharepoint.com/<document-library-name>/<path-to-file>/<file-name>
    *https://<company-domain>.sharepoint.com/sites/<site-name>/<document-library-name>/<path-to-file>/<file-name>
  - Site Page
    *https://<company-domain>.sharepoint.com/SitePages/<site-page-name>.aspx
    *https://<company-domain>.sharepoint.com/sites/<site-name>/SitePages/<site-page-name>.aspx
  - All Site Pages within a site
    *https://<companydomain>.sharepoint.com/SitePages/Forms/ByAuthor.aspx
    *https://<company-domain>.sharepoint.com/sites/<site-name>/SitePages/Forms/ByAuthor.aspx
  - List
    *https://<company-domain>.sharepoint.com/Lists/<list-name>/AllItems.aspx
    *https://<company-domain>.sharepoint.com/sites/<site-name>/Lists/<list-name>/AllItems.aspx
  - OneDrive URLs (only available if OneDrive is activated in Microsoft account)
    *MyFiles: https://<company-domain>-my.sharepoint.com/my
    *Folder: https://<company-domain>-my.sharepoint.com/my?id=<path-to-folder>
    *Microsoft Office file: https://<company-domain>-my.sharepoint.com/:x:/r/personal/.../_layouts/15/Doc.aspx?sourcedoc=%7B<file-id>%7D&file=<file-name>&...
    *Non Microsoft Office file: https://<company-domain>-my.sharepoint.com/personal/.../Documents/<file-name>
Return to the Sana Agents settings modal and paste the URL under 'sites'. Click “Validate URL” and confirm that the site is valid
After that, you will get a notification if the site URL is correct or incorrect
Configure additional settings as needed and click save.

Clarification: The setup process for both individual and shared SharePoint integrations is similar, with the distinction primarily in the post-setup configuration for shared integrations. Setting up a shared integration facilitates group access within Sana to chat about all files associated with the shared sites or folders. It's important to understand that this configuration does not change the original access permissions to the source files in SharePoint; it only enables discussions about these files within Sana. This is an integration designed to be able to share material from SharePoint. All users that can access this integration can access the integrated SharePoint folders, regardless of access on SharePoint. Additionally, one can add multiple folders in one integration.

Known Limitations

When a file or folder link from SharePoint is used, the owner of integration must have access to all parent folders in the hierarchy leading to the target location. If the integration owner has permission for a specific file or subfolder but lacks access to its parent folders, Sana Agents will fail to validate the used SharePoint link.

FAQ

Can I integrate multiple SharePoint sites? Yes, you can add multiple folders or sites within one integration setup.
Does the integration affect SharePoint permissions? No, the integration respects existing SharePoint permissions and does not alter them.

Data Handling and Privacy

Sana Agents is fully committed to data security and privacy. All data accessed by Sana Agents is encrypted both in transit and at rest. Sana does not train any underlying language models on your data, ensuring the privacy of your information. Sana Agents is ISO 27001 certified, SOC 2, and GDPR compliant, adhering to the highest standards of data security.

Support and Contact Information

For further information about Sana Agents or the SharePoint integration, please contact [email protected] via email.

SharePoint - Shared Integration Guide