> ## Documentation Index > Fetch the complete documentation index at: https://docs.letsflow.ai/llms.txt > Use this file to discover all available pages before exploring further. # SharePoint Online > SharePoint Online library ingestion into Flow knowledge search. ## What Flow indexes from SharePoint Online SharePoint Online syncs documents from sites and libraries you choose for Flow knowledge search. New connections use **All sites** access by default. You can limit a new connection to selected sites under **Advanced**. ## Prerequisites * A Microsoft Entra **Privileged Role Administrator** or **Global Administrator** who can grant consent in the Microsoft tenant you connect. * A Flow admin or knowledge manager who can manage knowledge sources under **Integrations**. * The SharePoint sites and libraries the team needs. ## Prepare the provider Flow uses Microsoft Graph application permissions to sync content without a signed-in user. Microsoft requires a Privileged Role Administrator or Global Administrator to approve these permissions. The SharePoint Administrator role alone cannot grant this consent. Application Administrator and Cloud Application Administrator also cannot approve Microsoft Graph application permissions. See [Microsoft's application permission requirements](https://learn.microsoft.com/en-us/graph/permissions-overview#application-permissions). Ask an existing administrator with a required role to review and grant consent for the app in the tenant you connect. The person managing SharePoint sites does not need a permanent Global Administrator role. ## Connect in Flow Open **Integrations** and choose **SharePoint Online**. Set **Connection available to**, then select **Continue**. **All sites** is the default. The next step is **Connect**; there is no separate access-choice or approval step. To limit a new connection, open **Advanced** on the **Teams** step and select **Selected sites only**. Enter one SharePoint HTTPS site URL or Graph site ID per line. You must name at least one site. This records which sites you intend to use; it does not grant access. See [SharePoint selected-site setup](/integrations/knowledge/sharepoint-scoped) for the administrator's grant and verification steps. On **Connect**, Flow shows the Microsoft organization it detected from your email domain, organization domain, or an existing Microsoft connection. Open the tenant lookup's **Advanced** section only if you need a different domain or Directory (tenant) ID. Complete the credential form with the Entra app Client ID and Client Secret. When Microsoft asks for consent, use the administrator account that can approve the application permissions. If another administrator approves a pending request, start the connection again from Flow after approval. ## Capabilities * Select sites, document libraries, folders, single files, **Site pages**, or single site pages for one team. * Search sites by name at the top level, and search files by name inside an open library or folder. Microsoft Graph has no search for a site's library list or for the site pages collection, so the search box hides at those levels; browse instead. Each level loads one page of items at a time with **Load more**. * Run scheduled or on-demand sync. * Search the synced documents in Flow. A team connection is how you select and sync the site. Read access follows the SharePoint permissions Flow crawled, not team membership. Connecting the source does not grant read, and it is not required for org-wide Knowledge or search. SharePoint does not expose per-page permissions for site pages, so the source's **Access for SharePoint pages** option decides the audience those pages get. **Allow the whole organization** (the default) makes them readable by every Flow organization member; **Restrict pages** gives them no extra audience from SharePoint permissions. This works alongside **Who can read this in Flow?** on the source: anyone that audience covers can read pages either way, so Restrict pages narrows what the page option adds rather than locking pages down. Change it under **Source options** on the source. It applies only where SharePoint gives no per-page answer; everything else keeps the permissions Flow crawled. ## Automation integration reference Automation action, scope, and risk reference lives in the [SharePoint Online integration](/automations/connectors/sharepoint-online). ## Sync and behavior After the first sync, confirm that the intended documents appear under **Knowledge**. Flow indexes PDF, DOCX, PPTX, plain text, HTML, Markdown, and CSV files. CSV files must contain UTF-8 or BOM-marked UTF-16 text, even if SharePoint labels them as Excel files. In Excel, choose **CSV UTF-8** when exporting. Quoted cells and multiline values stay as text; Flow does not execute formulas. Excel workbooks (XLS and XLSX) are not supported. Check **Search index** on the source to see which documents are searchable. A connected source can contain files that are not indexable because of their format, encoding, content, or size. After new file-format support becomes available, the next sync revisits the selected files, then resumes incremental updates. This one-time sync downloads the selected files again and can take longer or use more Microsoft request quota. You do not need to recreate the source or edit unchanged files. ## Troubleshooting | Symptom | What to check | | - | - | | Microsoft shows **Need admin approval** | Ask a Privileged Role Administrator or Global Administrator in the tenant you connect to review and grant consent. SharePoint Administrator alone is insufficient. | | Connection fails with `access_denied` | Consent did not complete. If you requested admin approval, wait for approval, then start the connection again from Flow. Otherwise, ask the consenting administrator to check the Microsoft error details and tenant policies. | | Tenant lookup fails | Open **Advanced** and enter the organization's `onmicrosoft.com` domain or paste the Directory (tenant) ID from Entra. | | Selected-site setup waits for site access | Ask a SharePoint administrator to grant the app read access to each site. Then select **Verify site access** in Flow. Entering a site URL and granting Entra consent do not grant site access. | | Automation action fails | Confirm the connected account still has access to the target provider record, group, workspace, or project. | | Permission error | Reconnect the provider after updating provider-side roles or scopes. | | Connected source has files that are not searchable | Check **Search index** and **Affected items and how to fix them**. Use a supported format. For CSV, save the file as UTF-8 or BOM-marked UTF-16 text, not a renamed workbook. Changing permissions does not make an unsupported file readable. | | File is empty or too large | Confirm the original file contains readable text. Split large content into smaller files, then sync again. | ## Related topics * [Knowledge overview](/integrations/knowledge/overview) * [Microsoft Entra ID](/automations/connectors/microsoft-entra) This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.