SharePoint Permissions Setup

Team Files and SharePoint Connector apps are designed to comply with highly regulated environments. The app has no permissions, and each user’s token is used to perform operations. The user’s OAuth token is stored in the browser's local storage, so there will be no customer data breach even in the unlikely event of ikuTeam’s infrastructure being hacked.

When connecting to SharePoint or OneDrive for Business, if you get the “Need admin approval,” you need to ask a SharePoint/Azure Admin to authorize the app's use.

Authorize the Team Files app to be used on SharePoint from Jira/Confluence:

The SharePoint/Azure admin should go to Confluence/Jira, open the Team Files App [or the dedicated SharePoint Connector App] app and connect to SharePoint.
Sign in as a Microsoft Office 365 admin to connect the app. Authorize the app on behalf of the organization. This needs to be done just one time.
Now, any user will be able to use the Team Files app in Jira or Confluence. Read/Write permissions are based on each user’s permissions.

Team Files / SharePoint Connector Apps use the following permissions on behalf of the user to make the files and folders accessible on Jira and Confluence via OAuth 2.0. The apps alone do not have any read or write permissions, even after authorization. The apps use each user’s access token to access content in SharePoint from Jira or Confluence.

API/Permissions name	Type	Description	Admin Consent Required

API/Permissions name	Type	Description	Admin Consent Required
Microsoft Graph
Files.ReadWrite.All	Delegated	Have full access to all files user can access	No
Sites.Manage.All	Delegated	Create, edit, and delete items and lists in all site collections	No
SharePoint
AllSites.Manage	Delegated	Read and write items and lists in all site collections	No
MyFiles.Write	Delegated	Read and write user files	No

SharePoint permissions on Confluence / Jira

Ensure that “Replicate Storage Permissions” are ON in the TeamFiles / SharePoint Connector apps in Jira/Confluence Admin Settings:

Admin settings on Confluence Data Center | Replicate storage permissions

Also, check here for more details about what changes if you change this setting: What changes when "Replicate storage permissions" is selected