SharePoint (Selected Sites)

The SharePoint integration connects Ivo Flow to your Microsoft 365 environment so workflows can read from and write to SharePoint document libraries.

Connection types

There are two ways to connect SharePoint in Ivo:

Microsoft 365 — connects as a Microsoft 365 user and can access all SharePoint sites that the signed-in user has permission to access.

Microsoft 365 (Selected Sites) — connects as a Microsoft 365 user but can only access sites that a SharePoint administrator has explicitly granted the Ivo app access to. Use this option when you want tighter control over which sites are available in Ivo.

Granting site access for Microsoft 365 (Selected Sites)

If you are using the Microsoft 365 (Selected Sites) connection type, a SharePoint administrator must grant the Ivo app access to each site before it can be used in a workflow.

Administrator requirements:

• SharePoint Administrator or Global Administrator in Microsoft Entra

• Member or Owner of the SharePoint site

• Sites.FullControl.All permission granted in Microsoft Entra

The grant is given once per site at the app level. After that, anyone who connects using Microsoft 365 (Selected Sites) can use that site, limited to the files their own account can access.

Access levels:

How to grant access using Graph Explorer:

1. Open Graph Explorer and sign in as a SharePoint Administrator or Global Administrator.

2. Open your profile picture, choose Consent to permissions, and consent to Sites.FullControl.All. This permission is only required for the administrator making the grant.

3. In the request URL, replace <example.sharepoint.com> with your site hostname. For a site under /sites/Legal, the request should be: sites/<example.sharepoint.com>:/sites/Legal/permissions

4. Use the following request body:

json

{
  "roles": ["write"],
  "grantedToIdentities": [
    {
      "application": {
        "id": "4642ea2d-3483-4fef-b1ce-0391443f8204",
        "displayName": "Ivo Sharepoint Integration"
      }
    }
  ]
}

5. Change write to read if the site should not accept uploads.

6. Run the query. A 201 Created response confirms the grant was successful.

7. Repeat for each site you want to make available.

8. After granting access, add each site to the SharePoint settings page in Ivo so it appears in the workflow editor.

Configuring site access in Settings

Admins can control which SharePoint sites appear in Ivo’s workflow editor for both connection types.

Navigate to Settings → Flow → Integrations → SharePoint to open the SharePoint settings page.

• Sites added to the read list will appear when syncing, listing, downloading, or watching files.

• Sites added to the write list will appear when uploading, as well as when syncing, listing, downloading, or watching files.

• A site added to both lists appears only once.

• Leave both lists empty to apply no restriction.

Note: If you are using Microsoft 365 (Selected Sites), you must add each site to settings for it to appear in the folder browser when building a workflow.

Important: When the read list has sites but the write list is empty, the upload action will show no sites. The upload action builds its results from the write list only, so make sure you grant write permissions to any site added to the write list.

Use the site address when adding sites, not a document library address. For example:

• https://ExampleSite.sharepoint.com/

• https://ExampleSite.sharepoint.com/sites/TestExample