> ## Documentation Index
> Fetch the complete documentation index at: https://docs.daoco.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect SharePoint Workspace

> Connect selected SharePoint and OneDrive resources through daoco's Microsoft 365 integration gateway.

SharePoint Workspace is a **Conditional** Files & Docs integration. Use it when a Microsoft 365 admin wants to authorize daoco for approved SharePoint sites, libraries, folders, files, or selected OneDrive resources. daoco connects through a Microsoft 365 [MCP](/connections/integrations#what-is-mcp) gateway after admin approval.

## Connect SharePoint Workspace

<Steps>
  <Step title="Open the SharePoint Workspace card">
    In daoco, open **Connections** -> **Integrations** -> **Files & Docs** and choose **SharePoint Workspace**.
  </Step>

  <Step title="Enter the tenant">
    Paste the Microsoft tenant domain or tenant ID.
  </Step>

  <Step title="Grant admin consent">
    A Microsoft Entra admin grants tenant-wide consent for the daoco application. See [Permissions and admin consent](#permissions-and-admin-consent) below.
  </Step>

  <Step title="Assign selected resources">
    A SharePoint admin must grant the daoco app access to each approved site, library, folder, or file.
  </Step>

  <Step title="Connect with a boundary">
    Paste the approved site URLs, site IDs, file IDs, folder IDs, or folder URLs into **Access boundary**, then choose **Connect**.
  </Step>
</Steps>

## Permissions and admin consent

daoco connects through a shared Microsoft Entra application. A Microsoft 365 admin must grant **tenant-wide admin consent** before daoco can use selected SharePoint and OneDrive resources.

daoco Microsoft 365 application client ID:

```text theme={null}
96751d00-c515-49a1-a1e4-5dd326653aa5
```

Requested Microsoft Graph application permissions:

```text theme={null}
Sites.Selected
Files.SelectedOperations.Selected
```

Do not grant `Files.ReadWrite.All` for this setup. daoco v1 uses selected permissions instead of tenant-wide file access.

### Admin consent flow

An Entra admin can grant consent from the Microsoft Entra admin center, or by opening this URL after replacing `{tenant}` with the tenant domain or tenant GUID:

```text theme={null}
https://login.microsoftonline.com/{tenant}/adminconsent?client_id=96751d00-c515-49a1-a1e4-5dd326653aa5
```

Example for `contoso.onmicrosoft.com`:

```text theme={null}
https://login.microsoftonline.com/contoso.onmicrosoft.com/adminconsent?client_id=96751d00-c515-49a1-a1e4-5dd326653aa5
```

1. Copy the daoco Entra client ID from daoco if needed.
2. Have a Microsoft 365 / Entra admin grant tenant-wide consent for the daoco app.
3. Assign the daoco app access to each approved site, library, folder, or file in SharePoint / Entra.
4. Return to daoco, enter the tenant, paste the approved resources into **Access boundary**, and choose **Connect**.

For more detail on selected-resource access, see [Microsoft Graph selected permissions](https://learn.microsoft.com/en-us/graph/permissions-selected-overview).