SharePoint
Microsoft SharePoint integration
Document ManagementAvailable
BRAIAN connects to Microsoft SharePoint through Microsoft Graph API, application permissions with sites.selected scope. Agents can document retrieval, metadata read and library search. Every action is scoped by the permissions granted to the integration and executed under a versioned policy. Each one is recorded in the audit log with the agent, timestamp and record touched.
What can BRAIAN do?
LegalAgent, HRAgent and RiskAgent retrieve documents and their metadata from the specific sites a process covers. Access is granted with the sites.selected scope, so the integration never sees the whole tenant.
| Capability | Agent | Read or write |
|---|---|---|
| Document retrieval | LegalAgent | Read |
| Metadata read | RiskAgent | Read |
| Library search | HRAgent | Read |
| Permission-aware access | All agents | Read |
How does it connect?
- Connection method
- Microsoft Graph API, application permissions with sites.selected scope
- Credential
- An Entra ID application with a certificate credential, granted access to named sites only.
Credentials are held in an encrypted secrets store. BRAIAN never stores end-user passwords.
Which permissions are required?
- Sites.SelectedSite-scoped, never tenant-wide: an administrator adds each site explicitly.
- Files.Read.All (within selected sites)Read access to the documents inside those sites, with their existing permissions honoured.
Permissions are requested at the minimum scope the configured processes require. Unused scopes are not granted.
Which processes use it?
Processes that run on this connection, and the domains they belong to.
Contract analysis
Clause extraction
Employee onboarding
How do you revoke access?
Access is revoked in Microsoft SharePoint itself — by disabling the credential or removing the granted scopes — or in BRAIAN by disconnecting the integration. Processes already running stop at their next call to Microsoft SharePoint and are held for review rather than completed with partial data; the interruption and the state of each process are recorded in the audit log.
FAQ
Does BRAIAN store data from Microsoft SharePoint?
BRAIAN reads what a process needs, when it needs it. Records retrieved from Microsoft SharePoint are held only for the duration of the process and in the audit trail of the actions taken; Microsoft SharePoint remains the system of record.
What happens if the connection fails mid-process?
The process stops at the failed step and is held for review. Nothing is written twice: completed writes stay recorded in the audit log and the remaining steps resume only once the connection is restored.
Can permissions be scoped per agent?
Yes. Scopes are defined per agent, not per system, so one agent can read while another cannot, on the same connection to Microsoft SharePoint.