...
To set permissions for the app, append _layouts/15/appinv.aspx to the site address. The URL should look like:
https://xxxxxxxxx.sharepoint.com/sites/Documents/_layouts/15/appinv.aspxThis will open a new page.
Paste the Client Id (retained in the earlier step) in the App Id field and click Lookup.
This fetches and displays the details of the App Id created earlier.
Provide the Permission Request XML specifying what access the App has. The XML structure is below.
Code Block <AppPermissionRequests AllowAppOnlyPolicy="true"> <AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" /> </AppPermissionRequests>
You may replace the scope with the following values. These should be used as is, do not modify.
TENANT = http://sharepoint/content/tenant
SITE COLLECTION = http://sharepoint/content/sitecollection
SUB SITE = http://sharepoint/content/sitecollection/web
LIST/LIBRARY = http://sharepoint/content/sitecollection/web/list
'Right' may also be populated with the following permissions. These should be used as is, do not modify.
Read = only read access
Write = add/edit/delete
FullControl = full permissions
Note: Based on the Scope selected, the App may require approval from the Azure Global Administrator.
Click Create.
On the confirmation screen, click on Trust It.
You App is ready to be used.
Now Navigate to the Site Settings → Site App Permissions page to fetch the App identifier for your App. Append ‘appprincipals.aspx?Scope=Web’ to the site address. The URL should look like:
https://xxxxxxxxxx.sharepoint.com/_layouts/15/appprincipals.aspx?Scope=WebCopy the App Identifier and retain it in a notepad or text editor. The identifier is used in Data source configuration in the next step.
...
On Luma Knowledge, navigate to Federated Service.
On the Manage Data Sources tab, click on Add Data Source.
Add new Data source details and click on Save.
Once the Data Source is created, click on the new data source to configurethe Authorization Profile.
On Configure Authorization Profile page, add the following details:
Select SHAREPOINT as Connection Type.
On the SharePoint Details section, Add your SharePoint Domain. The Domain should look like: “xxxxx.sharepoint.com”
Click on Get Tenant Id From SharePoint App. This function automatically populates the Identified Sharepoint Tenant Id and Resolved Resource Client Id from SharePoint.
Now configure your Sharepoint App details in Step 1.
Add the App Identifier in Client ID.
Add Client Secret.
Once the details are added, click on Save.
The Sharepoint data source is now ready.
...
Info |
---|
The artifacts created through the sync job are processed based on the Template selected in the Custom Function. If a custom template is not selected, the artifact undergoes the default Semantic Analysis process. Luma Knowledge generates QnA pairs and metadata from the document content. |
Note: For Sharepoint connection if you recieve a HTTP 401 / Unauthorized from server in the response body: '{"error":"invalid_request","error_description":"Token type is not allowed."}
'Need to check ifDisableCustomAppAuthentication
property using Get-SPOTenant -DisableCustomAppAuthentication if it is True it would disable this kind of authentication. Need to override the setting using this command:
Set-SPOTenant -DisableCustomAppAuthentication $false