Manage Microsoft integration

To allow users in your organization to export to Microsoft Teams and Microsoft SharePoint, set up the integration with Microsoft.

When you export a file to a team in Microsoft Teams, the file is stored in the SharePoint site associated with the team.

Requirements

You must be assigned the Admin account type in Sigma.
In your Microsoft organization, you must have at least the Privileged Role Administrator role assigned to your user to add the Microsoft integration.

Permission levels (Beta)

This documentation describes one or more public beta features that are in development. Beta features are subject to quick, iterative changes; therefore the current user experience in the Sigma service can differ from the information provided in this page.

This page should not be considered official published documentation until Sigma removes this notice and the beta flag on the corresponding feature(s) in the Sigma service. For the full beta feature disclaimer, see Beta features.

When configuring your Microsoft integration, you can select what level of access to grant Sigma. The available options are:

Write only access to specific Azure sites: This is the minimum permission level required. If you select this level of access, you need to configure additional permissions in the Microsoft Graph API for every Microsoft team you want Sigma to export to.

Microsoft permission names for Write only access to specific Azure sites

The following permissions are included:

Sites.Selected
ChannelSettings.Read.All
User.Read

Read/write access to all Azure sites: This allows Sigma to read and write to from all Microsoft Sites, Site Collections and Groups. If you select this level of access, no additional configuration besides accepting the permissions in Microsoft is required.

Microsoft permission names for Read/write access to all Azure sites

The following permissions are included:

Sites.ReadWrite.All
Group.ReadWrite.All
Files.Read.All
Group.ReadWrite.All
User.Read

Integrate with Microsoft

To export to Microsoft Teams and SharePoint, add the integration with your Microsoft organization. Your Sigma organization can only be connected to one Microsoft organization.

Open the Administration portal by selecting Administration in the user menu at the top right of your screen.
Open the Scheduled exports and actions page, and select the Settings tab.
Next to Microsoft, click Add.
In the Add Microsoft integration modal, select your desired permission level from Write only access to specific Azure sites and Read/write access to all Azure sites. See Permission levels for more information.
Select Log in with Microsoft to authenticate to your Microsoft organization and authorize the requested permissions. The Add Microsoft integration modal closes when you’ve successfully authenticated.
If you selected Write only access to specific Azure sites, you need to configure additional permissions in the Microsoft Graph API for every Microsoft site you want Sigma to export to. See Configure additional permissions for write access to specific Azure sites.
Test your integration by exporting a file to Microsoft Teams or Microsoft SharePoint.

If you have an existing Microsoft integration and want to update your permission level, select Remove next to the integration and repeat the steps above with your desired permissions.

After you integrate with Microsoft, you can export to Microsoft SharePoint. To export to Microsoft Teams, add the Sigma Notifications app to your team.

Configure additional permissions for write access to specific Azure sites

If you want to configure your Microsoft integration with Write only access to specific Azure sites, you need to configure additional permissions in the Microsoft Graph API for every Microsoft site you want Sigma to export to. See Permission levels for more information on available permission levels.

To configure these additional permissions, for each team, do the following steps:

Retrieve the siteId of the group. See the Microsoft documentation on https://learn.microsoft.com/en-us/graph/api/site-get?view=graph-rest-1.0&tabs=http#access-a-group-team-site.
Set write access for that site, using the siteId retrieved in the previous step and the Sigma notifications id.

{ "roles": ["write"], "grantedToIdentities": [ { "application": { "id": "76762b2d-50a9-4ab6-a600-ea8c8f14c164", "displayName": "Sigma Notifications" } } ] }

For more information, see the Microsoft documentation on Create a permission.

Add the Sigma Notifications app to Teams

Before exporting to a Teams channel, add the Sigma Notifications Teams app to the first named channel of the team.

The first named channel is the first channel named when creating a team. It might also be called the “General” channel or the home channel, and can be renamed. See Edit a channel in Microsoft Teams.

To identify the first named channel for a team, navigate to your team in the Teams sidebar, then choose More Options > Manage Team. The channel with a house icon next to it is the first named channel.

To add the Sigma Notifications app to the first named channel:

From the left sidebar of Microsoft Teams, click Apps, then search for Sigma Notifications.
For the Sigma Notifications Teams app, click Add.
When prompted to add the app to a channel, search for and choose the first named channel for your team, then click Go.

The app is added to the channel. If the app is new to the channel, it posts a welcome message.

You are now ready to export to all public (standard or shared) channels in the same team as the first-named channel.

If you add the Sigma Notifications app to a channel that was not the first named channel, exports to any channels in the team fail to send. Remove the app from the team, then add the app to the first named channel.