OneDrive and SharePoint

Your team’s files in Microsoft 365: a OneDrive folder, or a SharePoint document library. Reads, and a file write into a folder you granted.

Connects with	OAuth, after an administrator grants a folder or site
Reads	5 operations
Writes	3 operations, each granted separately
Irreversible	None
Personal data	Whatever the granted folder or site holds.
Data stays in	AWS Sydney (ap-southeast-2)

OneDrive and SharePoint share one connector. StoriBot connects to one folder, or one SharePoint site, that your organisation chooses. It cannot see anything else in your tenant, and it can never do more than the person who connected it is allowed to do.

What it reads

• The granted folder, and the folders beneath it.
• Each file’s name, size, modified time and link, and the file itself.
• A file’s saved versions.

What it does not read

Anything outside the granted folder or site. Microsoft enforces that, not StoriBot.

What it writes

Each of these is a separate operation you grant or withhold, and each works only inside the granted folder.

• Create a folder.
• Upload a file from the Stori.

It never overwrites an existing file (a name clash gets a new name) and it never deletes.

How you connect it

This connector takes two steps: a one-time setup by your Microsoft 365 administrator, then the connection in StoriBot.

1. Your administrator approves StoriBot and grants a folder or site

StoriBot asks Microsoft for two permissions, Files.SelectedOperations.Selected and Sites.Selected, plus offline_access to stay connected. The first two grant nothing on their own. StoriBot gains access only to the specific folder or site your administrator then grants, and Microsoft, not StoriBot, enforces that.

Microsoft provides no screen for granting a folder or site to an application. A SharePoint Administrator, or an owner of the site, runs a short script in Microsoft Graph PowerShell, signed in as themselves, that creates the grant and prints two values: a drive id and a folder id. The grant is read, or write if StoriBot may also create folders and upload files there. The same script lists and removes grants.

Granting a folder gives StoriBot that folder and everything inside it, including subfolders created later. Granting a site gives it the site’s main Documents library, top to bottom; the folder id for a site grant is the word root.

We provide the script and walk your administrator through it. Ask us.

2. Connect in StoriBot

From the Integrations page, choose Connect on OneDrive and SharePoint. Paste the drive id and folder id, tick the operations StoriBot may use (tick the create and upload operations only if the grant was made with write), and sign in with your Microsoft work account.

The person who connects must be able to open the folder themselves. StoriBot’s access is the overlap of the grant and that person’s own access. If Microsoft says the app needs admin approval, step 1 has not been done.

What StoriBot will ask for

• The drive id and folder id the script printed. They identify a folder; they are not credentials. They are stored encrypted with the connection and never shown to the AI.
• Your Microsoft sign-in at the consent screen. StoriBot never handles your password.

Removing access

• Run the script with its remove mode on the folder or site. StoriBot loses access immediately.
• Or, in the Microsoft Entra admin centre, open Enterprise applications, find StoriBot OneDrive & SharePoint, and remove it. Every grant stops working at once.

Not supported

Personal Microsoft accounts (outlook.com). The connector is for OneDrive for work or school and SharePoint Online.

Every operation

These are the names the Integrations page shows beside each tick box, in the order it lists them. Generated from the connector registry; do not edit by hand.

All 8 operations

Operation	Kind	What it does
get_granted	Read	Describe the folder your administrator granted StoriBot: id, name, webUrl, folder.childCount and parentReference.driveId.
list_granted	Read	List the granted folder, or the granted folders of the drive: each item’s id, name, size, lastModifiedDateTime, webUrl, a folder facet with childCount or a f…
list_folder	Read	List a folder beneath the granted folder by its path: each item’s id, name, size, lastModifiedDateTime, webUrl, a folder facet with childCount or a file face…
get_item	Read	Retrieve one file or folder beneath the granted folder by its path.
list_versions	Read	List a file’s saved versions, newest first: id, lastModifiedDateTime, lastModifiedBy and size.
create_top_folder	Write	Create a folder directly inside the granted folder.
create_folder	Write	Create a folder inside a folder beneath the granted folder, given the parent’s path.
get_upload_link	Write	Start an upload of a workspace file to a path beneath the granted folder (“report.csv” for the top, “Reports/report.csv” for a subfolder that already exists).