SharePoint Permissions Reference
This section outlines the permissions required for SailPoint Entro to integrate with Microsoft SharePoint and explains their purpose.
Navigation Path
Management → Accounts & Integrations → Azure
Required Permissions
Microsoft Graph (Application Permissions)
| Permission | Description |
|---|---|
User.Read.All |
Allows SailPoint Entro to retrieve basic user and NHI information across the tenant |
Directory.Read.All |
Grants read access to directory objects such as users, groups, and roles |
Sites.Read.All |
Enables SailPoint Entro to read all site collections and associated metadata |
Files.Read.All |
Allows SailPoint Entro to read files’ metadata, structure, and access permissions |
AuditLog.Read.All |
Prioritizes scanning or active users by their last logon timestamp. |