Going crazy trying to configure this plugin.
It won’t let me use Application permissions, seems to require a user. We can’t use standard user accounts as they require MFA at our company. We even created a special user account that does not require MFA, and tried “delegated” permissions, but no configuration we try works.
Access Denied errors.
Has anyone got this plugin working, and if so, what did you have to do?
Have you been able to make it work and if so, can you share your solution here for other users who might struggle the same?
If not, I suggest you open a technical support ticket through our website.
I’ve had a ticket open for a while; it’s progressing. I thought I’d also post here too “to widen the search”. No, nothing so far has worked.
Out of curiosity, I went and looked at the Microsoft Sharepoint 365 Output plugin online help and this caugthed my attention:
Use delegated permissions: Select this option to use delegated permissions instead of application permissions. Delegated permissions allow the application to log in as a standard registered user, and IT can grant that user account access to specific inboxes and specific OneDrive folders.
Application permissions can be restricted to a strict minimum to ensure the plugin can perform its tasks, but no more. However, application permissions apply to all accounts in the organization: if the application has been granted permission to read emails, then that permission applies to all email accounts in the organization, and if it has access to OneDrive, it has access to all folders.
Knowing IT people, I doubt they’d agree to this…you might want to check with them. They are usually very much against opening all to an application…
We cannot use delegated permissions as all our user accounts require MFA. Two-factor authentication cannot be automated. We must use application permissions.
I only mentioned it as in your first post, you said that you tried Delegate permission
It’s been a while since I worked with the Microsoft 365 plugins, but I do believe they all use MS Graph to access the data. Therefore, when using application permissions, the application itself must be granted the rights to access MS Graph.
This is somewhat documented on the Microsoft 365 OneDrive input help page. That page also contains a link to a Microsoft Learn article detailing what - and how - rights need to be granted to applications.
Not sure if this is relevant, but I hope it puts you on the right track to resolving your issue.
When we use the Application permissions (“Delegate permissions” unchecked) we get Access Denied error immediately. Evidently this is because we haven’t (and cannot/won’t) give the Application full control. So we granted one of our non-user/service accounts Full Control over the site and document library, and told the plugin to use that account with “Delegate permissions” checked. It cycles through 15 error/retry attempts each getting “Access Denied”.
You migth want to go back to the agent working on your ticket. It might be that the plugin isn’t able to deal with whatever setup you have.
You could ask the agent to see if R&D has a Javascript code equivalent of what the plugin does so you can play with the code directly and adapt it.
Once you found the right recipe, you can then go back to the agent and provide the solution. Maybe the plugin can then be adapted to your peculiar situation.
Resolved! We skipped/missed the “global consent” step. Once we completed that, the auth token etc. was correct. and the file(s) were properly uploaded. The documentation Phil linked helped tremendously.
Thanks for confirming I can still be relevant from time to time… 