---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Configure Microsoft SharePoint with Major Security Incident Management

# Configure Microsoft SharePoint with Major Security Incident Management {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read

Establish a connection between Major Security Incident Management and Microsoft SharePoint to enable document collaboration and management of security incidents.

## Before you begin

Role required: admin, sn_msi.workspace_admin  
Note:  
The Azure App Registration credentials (Client ID, Tenant ID, Certificate or Client Secret) are the same values entered in each instance. The SharePoint Site URL differs if separate sites were provisioned per environment.

## Procedure

1. Navigate to WorkspacesMajor Security Incident ManagementAdministration.
2. Select Document Collaboration, and then Microsoft SharePoint Setup.
3. Select Grant Azure App Access to SharePoint Site from the context menu.
4. Grant access to your registered application using one of the following methods: Curl Commands, Azure CLI or PowerShell.  
   Note:  
   * The Azure administrator must provide the access configuration.
   * Grant the Sites.FullControl.All permission to the registered application.
   * Remove the Sites.FullControl.All permission when the access is successfully granted.
   {#config-sharepoint-msim__ul_f5y_gk3_w2c}  
   Note:  
   This is a two-phase process: **Phase 1 (Azure portal)** --- temporarily grant Sites.FullControl.All at the API Permissions level on the App Registration to enable the site-level grant commands below. **Phase 2 (commands)** --- execute one of the three methods to grant *write* access to the registered application at the SharePoint site level via the Microsoft Graph API. Once the ServiceNow connection is confirmed, return to the Azure portal and remove Sites.FullControl.All from API Permissions; the site-level write permission granted by the commands remains in place for ongoing MSIM operations. For the command reference for all three methods, see [Commands to grant Azure application access to the Microsoft SharePoint site](https://servicenow-prod.fluidtopics.net/xun0JAoVa0L2exIPwwnQOA "Use one of the following three methods to grant your registered Azure application write access to the Microsoft SharePoint site at the site level, using the Microsoft Graph API.").
5. Select Set Up SharePoint Configuration from the context menu.
6. Select a configuration type in Select Configurations Types, and configure the following.  
   * Certificate (Applications Permissions)

     {#config-sharepoint-msim__table_ocf_t43_w2c__entry__2}

     | Field | Description |
     |-|-|
     | SharePoint Site URL | The Microsoft SharePoint Site URL. |
     | SharePoint Document Library Name | Name of the Microsoft SharePoint document library. |
     | Directory (tenant) ID | The unique identifier of your Azure Active Directory instance. |
     | Application (client) ID | The unique identifier of your registered application in Azure. |
     | Upload Certificate | The certificate file for the authentication. |
     | Thumbprint | The thumbprint for the certificate. |
     | Keystore password | The keystore password to access the certificate's thumbprint. |
     [Table 1. SharePoint settings for certificate]

     {#config-sharepoint-msim__table_ocf_t43_w2c}
   * Client Secret (Applications Permissions)

     {#config-sharepoint-msim__table_j4w_t43_w2c__entry__2}

     | Field | Description |
     |-|-|
     | SharePoint Site URL | The Microsoft SharePoint Site URL. |
     | SharePoint Document Library Name | Name of the Microsoft SharePoint document library. |
     | Directory (tenant) ID | The unique identifier of your Azure Active Directory instance. |
     | Application (client) ID | The unique identifier of your registered application in Azure. |
     | Client Secret | The secret string of the application used for requesting a token. |
     [Table 2. SharePoint settings for Client Secret]

     {#config-sharepoint-msim__table_j4w_t43_w2c}
   {#config-sharepoint-msim__ul_fh5_443_w2c}
7. Select Configure \& Get OAuth Token.  
   A login prompt appears to provide your Microsoft account details.
8. Provide your Microsoft account details and login.  
   A successful message appears and the connection is established.

*[\>]: and then