Azure Active Directory

Configuration that is to be done in Azure Active Directory

To let Moment access SharePoint there needs to be created an app in Azure for this purpose.

Applications

When logging into the Azure portal, you will find yourself in the home screen. Here click on the "View" button for the "Manage Azure Active Directory" section.

This will bring you to the overview page, on this page make note of the value shown as "Tenant ID"

To access SharePoint the integration needs an application that handles the security and access. Read here on how to create an app in Azure Active Directory.

For best security Moment recommend using Sites.Selected as API permission (see below), in order to do this there is a need to create two applications. These will have different API permissions.

The integration is using the Microsoft Graph API, so all permissions required should be in this API. Also make sure it is Application permissions that is selected.

Application #1:

This is the application that will be actually used by the integration

This application should get Sites.Selected and remember to grant admin consent.

Add a secret to this application. (How to add secret)

Remember to copy the secret when it's been generated, this will be available again at a later time.

Application #2:

This is an administrative application that will be used during the configuration of permissions.

This application should get Siltes.FullControl.All and remember to grant admin consent.

Add a secret to this application. (How to add secret)

Remember to copy the secret when it's been generated, this will be available again at a later time.

Since the idea is to only give access a specific site, or multiple sites, the site ID for the site to be used is also needed. There are two methods on finding this.

Open the site in SharePoint, view the page source and search for the siteId. It's a UUID.
Use Postman and list all sites and find the siteId in the returned list of sites.

Postman

Now that the two applications has been configured and the various information has been gathered - the steps required in Postman can be taken. Read more about this on the Postman page.