Tonkean Application - Share Selected Sites

Log in to your Microsoft Online account and ensure you have the appropriate admin permissions to perform this setup process.

Navigate to the following link: https://login.microsoftonline.com/common/adminconsent?client_id=e856d40b-3b77-458a-a883-56dcb226337d

Select the appropriate Microsoft account. A Permissions requested window displays.

Confirm that the application name reads "Tonkean for SharePoint - Selected Sites", then select Accept. If installation of the application is successful, you are redirected to the Solutions screen in Tonkean.

In your Azure Active Directory admin center, navigate to Enterprise applications. The newly-added Tonkean for SharePoint - Selected Sites application displays in your list of applications.

Navigate to the SharePoint site you want to allow Tonkean to access.

In the browser address bar, locate the site URL.

To locate the values needed, you will manipulate this URL to access raw XML and extract those values.

With your Site ID complete, save it in your separate document. You need the Site ID value to give the Tonkean for SharePoint - Selected Sites application access to your SharePoint site and also to connect SharePoint using application authentication in Tonkean. The complete Site ID should display in the following format: {hostname}.sharepoint.com,{spsite-id},{spweb-id}

For example, the Site ID value for the site shown in the images above is tonkeantest.sharepoint.com,80dd51de-XXXX-XXXX-XXXX-73af1471076e,e874940c-XXXX-XXXX-XXXX-4458baf842b6

Make sure there are no spaces in the Site ID value.

Open Microsoft PowerShell.

Install the PowerShell Graph API module by running the following command: Install-Module Microsoft.Graph -Scope CurrentUser

If you encounter the below error when running this command, you must take additional steps to ensure you have access to the PowerShell module repositories:

Install-Package: No match was found for the specified search criteria and module name'Microsoft.Graph'. Try Get-PSRepository to see all available registered modulerepositories.

Run the Register-PSRepository cmdlet to register the default repository for PowerShell modules:

Register-PSRepository -Default

Read more about this cmdlet in the PowerShell scripting reference.

After you run the script to register the directory, you can run Get-PSRepository to confirm registration was successful.

PowerShell may return a message that you are installing an "untrusted repository" when running the script to install the Graph API module. This is expected. Enter Y to install the modules from 'PSGallery'.

After you've successfully installed PowerShell Graph API module, connect to the module by running the following command: Connect-MgGraph -Scopes “Sites.FullControl.All”

If the commands are executed successfully, a Permissions requested window displays for Microsoft Graph PowerShell. Select Accept. The Microsoft Graph PowerShell application is added to your enterprise applications in Azure.

Grant access for the specific SharePoint site to the Tonkean for SharePoint - Selected Sites application by running the script below in PowerShell.

You will need the Site ID for the specific SharePoint site you want to allow Tonkean to access.

Import-Module Microsoft.Graph.Sites

$params = @{
    Roles = @(
        “write”
    )
    GrantedToIdentities = @(
        @{
            Application = @{
                Id = “e856d40b-3b77-458a-a883-56dcb226337d”
                DisplayName = “Tonkean SharePoint Selected Sites”
            }
        }
    )
}
$siteid = “tonkeantest.sharepoint.com,80dd51de-XXXX-XXXX-XXXX-73af1471076e,e874940c-XXXX-XXXX-XXXX-4458baf842b6”

New-MgSitePermission -SiteId $siteid -BodyParameter $params

The application Id value, e856d40b-3b77-458a-a883-56dcb226337d, is the unique ID for the Tonkean for SharePoint - Selected Sites application.

For each SharePoint site you want to allow Tonkean to access, you must extract and generate the Site ID and run the above PowerShell script. Repeat these steps as necessary to provide access to each SharePoint site. Note that each site you provide access for this way displays as a unique data source in Tonkean.

In Tonkean, select the main nav icon, , in the upper left and select Enterprise Components. The Enterprise Components screen displays.

Select + New Data Source in the upper right.

Select Cloud Application from the dropdown. The Add New Data Source window displays.

Enter "SharePoint" in the search field and select SharePoint Online from the results. The New SharePoint Online Connection window displays.

Select Create a new connection. The Set Up Data Source window displays.

Select Use Application Authentication. The Application Authentication section displays.

Locate the helper text beneath the Tenant ID field and select here where it says "Get your Tenant ID here." A new tab opens in your browser where the Azure Active Directory admin center displays.

If you are not logged into Microsoft Online, you are prompted to log in when the new tab opens.

On the Overview screen for your Azure Active Directory, locate your Tenant ID and copy the value.

Return to Tonkean and paste the Tenant ID value into the Tenant ID field, then select Authenticate with SharePoint Online. If authentication is successful, a success message appears at the top of the Set Up Data Source window that reads "Authenticated".

The Set Up Data Source window now displays the Enter Site ID field, which is a unique identifier for the specific SharePoint site you want to allow Tonkean to access. Enter the Site ID you generated previously and select the Document Library dropdown to choose a library. When finished, select Save.

Note that the Folder dropdown is grayed out when connecting using the Selected Sites application.

If you want to connect to a specific folder in your SharePoint site, follow the steps below: