Steps to configure SharePoint Application/Connector on Azure portal, required for HelixGPT as Information Source.

Here are the steps to configure SharePoint Application/Connector on Azure portal

1. Navigate to Azure Portal.

   

2. Select App registrations → New registration.

3. Enter a suitable Name for the app.

4. Under Supported account types, select Accounts in this organizational directory only (default).

5. Click Register.

6. On the Overview section, note the following details (these will be required for the BMC HelixGPT Information Source connection setup):

   • Application (client) ID → used as Client ID in Add Connection form in BMC HelixGPT

   • Directory (tenant) ID → used as Tenant ID in Add Connection form in BMC HelixGPT

   • Display name → used as Connection Name in Add Connection form in B<C HelixGPT

7. In the left panel, go to Certificates & secrets → New client secret.

   

8. Enter a description and select an expiration period, then click Add.

   

9. Copy the Value of the newly created secret — this will be used as the Client Secret in Add Connection form in BMC HelixGPT

10. On the left panel, select API permissions → Microsoft Graph.

    

11. Select Add a permission → Application permissions.

    

12. Add the following permissions:

    • Sites.Read.All

    • Sites.Selected

    

    Please note that if Sites.Selected is used instead of Sites.Read.All, admin consent alone is not sufficient.

    After granting admin consent, the administrator must explicitly grant the application access to the required SharePoint site.

    Additional Steps:

    1. Get the SharePoint Site ID using:
       GET https://graph.microsoft.com/v1.0/sites/{hostname}:/sites/{site-name}

    2. Grant the application access using:
       POST https://graph.microsoft.com/v1.0/sites/{site-id}/permissions

       Use the following request body:

       {
         "roles": ["read"],
         "grantedToIdentities": [
           {
             "application": {
               "id": "<APPLICATION-CLIENT-ID>",
               "displayName": "<APPLICATION-NAME>"
             }
           }
         ]
       }
       

       Replace the placeholders with the relevant Site ID, Application (client) ID, and Application Name.

    Use read for read-only access or write if the application needs to modify SharePoint content.

    In summary:

    • Sites.Read.All → Admin consent → Access to all SharePoint sites

    • Sites.Selected → Admin consent → Explicitly grant access to each required site

    Please ensure the administrator performing this configuration has sufficient permissions to grant application access to the SharePoint site.

13. Click Grant admin consent for <organization> to apply permissions organization-wide.

    

14. Navigate to My Apps Portal.

15. Select SharePoint.

    

16. This will redirect you to your associated SharePoint site.

17. From the left menu, click My Sites.

    

18. Either select an existing site or create a new one. After selecting, note the URL (for example, domain.sharepoint.com/sites/SiteName).

    • The Site Name (excluding https://) will be used in the connector configuration in BMC HelixGPT