1. Before you start
- On the Microsoft 365 connection, select sharepoint and grant Sites.Selected as a Microsoft Graph Application permission.
- After tenant admin consent, a SharePoint administrator must separately grant this application the read role on every approved site. Sites.Selected consent by itself grants access to no sites.
- Do not send SharePoint credentials, customer content, personal information, or private record data by email or through an ordinary support ticket.
2. Connect SharePoint
- Start with the Microsoft 365 connection in the intended Seedling workspace. If it is unavailable, contact Seedling support before creating credentials.
- Verify the immutable Entra tenant ID and tenant admin consent for the exact application-role bundle.
- In Microsoft Graph Explorer, resolve GET /v1.0/sites/{hostname}:/{site-path}?$select=id,displayName,webUrl and copy the complete comma-separated site id.
- Run GET /v1.0/sites/{site-id}/drives?$select=id,name,webUrl, match the approved library by name and URL, and copy its drive id.
- Add the library drive id as the exact container and the complete site id as its parent before sync; verify the matching Sites.Selected read grant.
- Add each SharePoint source separately and confirm Seedling accepts the exact Microsoft ID before synchronization.
3. Authorization and connection problems
- Setup unavailable
- Microsoft 365 or SharePoint is not available for this Seedling workspace. Contact Seedling support; broad delegated access is not a fallback.
- Member cannot read SharePoint content
- Seedling does not show SharePoint content until current Microsoft permissions confirm that the member can access it.
4. Missing or delayed data
- Verify the exact site and library selection and Sites.Selected grant.
- Review permissions, information barriers, sharing, licensing, deletion state, and retry warnings.
- Allow incremental synchronization and provider retry handling to complete. A temporary provider failure does not delete previously synchronized data.
- If the issue remains, contact support@tryseedling.ai with the Seedling workspace, safe timestamps, and non-sensitive provider record identifiers. Do not include credentials or record contents.
5. Rotate or replace access
Never use email or an ordinary support ticket to transfer the old or replacement credential.
- Rotate the exact Entra application credential without changing the immutable tenant or application identity.
- Retain only the approved selected-site, file, and directory application roles.
- Verify the replacement certificate and the same selected sources before retiring the previous credential.