# Provisioning

The Microsoft SharePoint Online SaaS connector supports provisioning, allowing you to create and manage accounts and entitlements in Microsoft SharePoint Online directly from SailPoint.

**Prerequisite:** Your system is configured for provisioning.

When SailPoint provisions new accounts to the source, it uses the attributes on the **Create Account** page as instructions or a template for what to include in the account. This page is also referred to as the *provisioning policy*.

When new access is granted on a source where a user does not already have an account, SailPoint automatically includes account creation in the provisioning. This applies whether provisioning is started from an access request or from an automated role or lifecycle state assignment.

For direct-connect sources, SailPoint automatically creates the account from this configuration. If the source is not configured as a direct-connect source, SailPoint creates and assigns a provisioning task to the source owner and includes the values for the source owner to use in manually creating the account.

> [!IMPORTANT]
>
> This section describes the default **Create Account** configuration. SailPoint recommends that you work with Services to define a provisioning configuration specific to your company's needs. Be sure to verify large changes to the provisioning policy before implementation. Failure to do so might cause provisioning to fail.

## Default Create Account Attributes

The following generator creates required information for a new Microsoft SharePoint Online account. You might need to edit the contents.

| Account Attribute | Generator | Description |
| --- | --- | --- |
| UserName | Identity Attribute | Enter the user name for Office 365. For example, `johnny@contoso.com`. |

## Provisioning Policy Attributes

The following tables list the provisioning policy attributes for creating accounts, creating groups, and updating groups.

> [!NOTE]
>
> Attributes marked with an asterisk (\*) are mandatory.

### Create Account

| Attribute | Description |
| --- | --- |
| UserName\* | The user name of Office 365. For example, `johnny@contoso.com`. |

### Create Group

| Attribute | Description |
| --- | --- |
| Title\* | The name of the group. |
| SiteCollection\* | The site collection URL. |

### Update Group

| Attribute | Description |
| --- | --- |
| OnlyAllowMembersViewMembership | Members who can view the membership list. |
| AllowMembersEditMembership | Members who can edit the members. |
| AllowRequestToJoinLeave | Allow request to join or leave from the group. |
| AutoAcceptRequestToJoinLeave | Membership requests are automatically accepted. |
| Azure AD Groups | Domain security groups. |

> [!NOTE]
>
> You cannot add Azure Active Directory groups when creating a SharePoint Online group due to an API limitation.