# Microsoft files (OneDrive and SharePoint)

## In brief {#summary}

With Microsoft files, your assistant finds and reads your documents in **OneDrive** and in the company's **SharePoint libraries**. Depending on the rights given, it can also upload a file, create a folder or share a document with the colleagues on the case.

Two steps:

1. **A Mitogen workspace admin opens Microsoft files**, on the company's Microsoft organization, and chooses the useful spaces: OneDrive and SharePoint libraries.
2. **Each person connects their work Microsoft account**, in Connections.

Key points:

- Work or school accounts only. Personal OneDrive (consumer Microsoft account) is not supported.
- Files stay at Microsoft. The assistant only sees what the signed-in person can see.
- The Microsoft agreement is given once per organization and also covers Outlook and Teams.

## Before you start {#before}

| What you need | Why | How to check |
|---|---|---|
| Microsoft 365 with OneDrive or SharePoint | These are the spaces Mitogen opens. | See [What is OneDrive for work or school?](https://support.microsoft.com/en-us/onedrive/what-is-onedrive-for-work-or-school) and [What is SharePoint?](https://support.microsoft.com/en-us/sharepoint/platform/what-is-sharepoint). |
| The address of the useful SharePoint sites | You paste it to open a library. | Open the site in your browser and copy the address, like `https://your-company.sharepoint.com/sites/Projects`. |
| The first time: an administrator of your Microsoft organization | The agreement for the whole organization can only be given by an administrator who has that power. | See [who can give this agreement](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent) and [the admin roles](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles). |
| You are an admin or the owner of the Mitogen workspace | Only they can open a tool for the team. | You can open **Modules**. |

> **Are you a team member?** Go straight to [Connect my account](#connect).

## Open Microsoft files for the team {#open}

1. Open **Modules**: `https://mitogen.ai/console/modules`.
2. On the **Microsoft files** card, click **Open**. A short introduction appears: “Microsoft files, in Mitogen”.
3. Click **Open files**. The window takes the title **Link Microsoft files**. The steps: **Organization · Agreement · Spaces · Access**. The Agreement step only appears when needed, for a new organization. If the workspace does not know any organization yet, the window starts directly with Agreement.

There is no Name step: OneDrive is named automatically (see [Spaces](#spaces)).

Not ready yet? **Later** closes the window without creating anything.

The **Help ↗** link at the bottom of the window opens the section of this page for the step on screen. If you close before the end, the card shows **To finish** and **Resume** takes you back where you were.

### Step · Organization {#organization}

- The title “Which Microsoft organization?”.
- One card per organization already authorized on the workspace (“Already authorized on this workspace”), and a last card **Another organization**.
- No card is greyed out here: you can add more spaces on an organization already in use.
- Buttons **Continue** and **Cancel**.

Choose your organization: no new agreement is needed. Otherwise, **Another organization**.

### Step · Agreement {#consent}

An administrator of your Microsoft organization authorizes Mitogen, **once for the workspace**. The screen says so: “A Microsoft 365 administrator gives the agreement once. It also covers Outlook and Teams.”

1. Field **Organization name** (optional), example “E.g. Smith Workshop”.
2. **Open Microsoft**: a Microsoft tab opens.
3. Sign in with the account of an administrator of your Microsoft organization who can give an agreement for the whole organization.
4. Read the permissions requested, then accept them.
5. Come back to Mitogen: **I finished**. Closed the tab too early? **Reopen Microsoft**.

**What Mitogen asks for files**: **delegated** permissions only. Mitogen acts on behalf of the signed-in person: read and write the files they can access, and read SharePoint sites. Never global access to all the organization's files.

The possible messages are explained on the [Outlook](/en/tools/outlook#consent) page. They are the same.

### Step · Spaces {#spaces}

Here you choose where the assistant can work. The screen asks “Which files to open?”.

**OneDrive row**

- The line “Each person's OneDrive. One for the whole workspace.”
- The button **Bind OneDrive**. Click it: OneDrive is bound right away, and the button becomes **OneDrive already bound**.
- The binding is named automatically “OneDrive” followed by the Microsoft organization's name, for example “OneDrive PROCLOUD”. A OneDrive already bound keeps its name.

One OneDrive binding is enough for the whole team: each person finds **their own** OneDrive there once their account is connected. If OneDrive is already bound, the row shows **OneDrive already bound** as soon as the step opens.

**SharePoint library block**

1. “Sign in to Microsoft, then paste the SharePoint site or library address.” Click **Sign in to Microsoft ↗** and sign in with your work account. This sign-in is only used to find the libraries.
2. In the **SharePoint address** field, paste the site address, for example `https://your-company.sharepoint.com/sites/Projects`.
3. Click **Add**. If the site has several libraries: “Several libraries found. Choose which one to link.” Choose the right card.

Repeat for each useful library. The **Already open** list shows what is ready. Ten bindings at most: beyond that, “You already have ten bindings. Remove one before adding another.” You can rename each space later on its sheet (**Name** field).

**Continue** becomes active as soon as a space is bound, OneDrive or a library, and leads to the Access step. While nothing is bound: “Bind at least OneDrive or a library to continue.”

### Step · Access {#access}

Here you choose who can use Microsoft files, and what the assistant may do there for each person. This screen is the same for every tool.

**On screen**: the line “Give access”.

- **One block per space bound at the Spaces step**, titled with the space's name (for example “OneDrive PROCLOUD” and “Projects”). Each space is a separate binding: you choose people and their rights space by space.
- In each block, the members of your Mitogen workspace, with a checkbox per person. You appear as **You**, already checked.
- On each checked row, the five rights. **Read** is on and locked. **Create**, **Modify**, **Delete** and **Send** are set for that person. For Microsoft files, Send has no effect (see [Rights](#rights)).
- Buttons **Give access** and **Later**.

**What you do**

1. In each block, check the people who need it.
2. For each person, turn on the rights they need. What each right allows in Microsoft files: see [Rights](#rights).
3. You can uncheck **You** as soon as someone else is checked in the same block.
4. Click **Give access**.

While a block has nobody, **Give access** stays greyed out and a line below it reads “Add at least one person to Projects.”

**Next**

The screen confirms “The team can now use Microsoft files.”, then “2 people will receive an email.” If there is only one: “1 person will receive an email.”. Click **Done**.

If the email could not be sent, the screen shows “Access is saved. The message was not sent. Copy the Connections link.” Copy the link offered and send it to your colleagues yourself.

**If you click Later**, everything so far is saved, but nobody has access. The card shows **To finish** with the line “Access to grant”. **Resume** brings you back to this step.

You can change rights at any time afterwards, in **Team › Connection rights** (see [Rights](#rights)).

## Connect my account {#connect}

1. Open **Connections**: `https://mitogen.ai/console/connections`.
2. Under **Microsoft files**, each space opened for you appears: OneDrive, and each library.
3. On each one, click **Connect my account on Projects** and sign in with your work address.

One connection per space: if you have access to OneDrive and two libraries, you make three connections. They count toward your connection limit (“4 of 16 connections”).

Your account must belong to the linked organization. The assistant only sees what you already see in OneDrive or SharePoint.

## Rights {#rights}

Rights are set **per person and per binding** (so per space).

**Common rules**

- **Read** comes with access. It is locked and cannot be removed.
- **Create**, **Modify**, **Delete** and **Send** are set person by person: at the [Access](#access) step, then at any time. Only a workspace admin or the owner sets them.
- You need the right in Mitogen **and** the right in OneDrive or SharePoint for the signed-in account.
- Removing a person's access also cuts their connections on this binding.

Here, **Send** is of no use: Mitogen does not send files through Microsoft. To share a document, the **Modify** right is what counts. If you turn on Send, any send request will be refused.

| Right | What it allows | What it does not allow |
|---|---|---|
| **Read** | Search, browse and read files and folders. | Change anything. |
| **Create** | Create a subfolder. Upload a file to a folder (250 MB at most). | Create an empty document from scratch. |
| **Modify** | Replace, rename or move a file. Share a file or folder with the members of the Mitogen case, if they are in the same Microsoft organization. | Share outside the organization. Rename or move a folder. Comment. |
| **Delete** | Remove a file. | Delete a folder. |
| **Send** | Nothing for this tool. |  |

**Where to set rights**: at the [Access](#access) step when you open the tool, then at any time in **Team › Connection rights**.

## If something blocks {#troubleshooting}

| What you see | Most likely cause | What to do |
|---|---|---|
| “Paste the SharePoint site or library address.” | The **SharePoint address** field is empty, or the address is not a SharePoint site. | Copy the site address from your browser. |
| “Microsoft library sign-in did not complete.” | The search sign-in was closed. | Click **Sign in to Microsoft** again. |
| No library found | The address does not point to a site, or your account has no access to it. | Check the address and your rights on the site. |
| The button shows **OneDrive already bound** | OneDrive is already bound. | Nothing to do: one OneDrive binding serves the whole team. Add a library if needed. |
| “Bind at least OneDrive or a library to continue.” | No space bound. | Click **Bind OneDrive**, or add a library. |
| “You already have ten bindings. Remove one before adding another.” | Limit reached. | Remove a binding you no longer need. |
| Personal Microsoft account refused | Only work accounts are accepted. | Use your work address. |
| The assistant cannot share with a client | Sharing outside the organization is not possible. | Share it yourself from OneDrive or SharePoint. |

## Remove access {#revoke}

1. **A person**: **Connections** › **Revoke this account**, on each space.
2. **An admin, for one person**: the space's sheet › **Access** section › remove the person. Their connections on this space are revoked.
3. **An admin, for one space**: the space's sheet › **Remove binding**.
4. **On the Microsoft side**: see [Outlook › Remove access](/en/tools/outlook#revoke). The agreement is shared by Outlook, Teams and Microsoft files.

Files stay at Microsoft. Nothing is deleted when you remove access.

## Official docs {#official-docs}

| Topic | Link |
|---|---|
| OneDrive for work or school | [What is OneDrive?](https://support.microsoft.com/en-us/onedrive/what-is-onedrive-for-work-or-school) |
| SharePoint | [What is SharePoint?](https://support.microsoft.com/en-us/sharepoint/platform/what-is-sharepoint) |
| Give the agreement for the organization | [Grant admin consent](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent) |
| Admin roles | [About admin roles](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles) |
| Review and remove permissions | [Manage application permissions](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/manage-application-permissions) |

## FAQ {#faq}

**Do I need to open each colleague's OneDrive?**
No. One OneDrive binding is enough. Each person finds their own OneDrive there by connecting their account.

**Does the assistant see all the company's files?**
No. Only the open spaces, and only what the signed-in person can already see.

**Can the assistant delete a folder?**
No. It can only remove a file, with the Delete right.

**Why several connections?**
Each space (OneDrive, each library) has its own connection. You stay in control, space by space.