SharePoint integration

You can integrate AutogenAI with your organization's SharePoint, so that selected folders and files sync directly from SharePoint into your AutogenAI knowledge hub. Once access is granted you choose which SharePoint sites to sync, and which folders within a site — giving a high degree of control over what reaches AutogenAI.

The sync is one-way: changes made in SharePoint are reflected in AutogenAI, but changes made to documents in AutogenAI never sync back to the original file in SharePoint. Document managers control which members of the organization can access and view the SharePoint library.

Prerequisites

• The document manager role on AutogenAI.
• The admin role on the Microsoft SharePoint site you want to connect to.
• Ideally, a conversation with your Customer Success Manager before you begin.

Option 1: Integrate via the AutogenAI UI

This is the recommended route for most customers and takes a few minutes.

Go to the knowledge hub in AutogenAI and select "+ SharePoint Libraries" (requires the document manager role.)

Sign in on the Microsoft login page. If you don't have admin access, you'll be prompted accordingly.

If you have admin access, grant access to SharePoint-sync when prompted by clicking Accept.

Then, click "Grant Access" back in AutogenAI.

Choose the SharePoint site and click Next.

Select the drive you want to sync (one drive per library — connect additional libraries for additional drives).

Choose the folders to sync — all folders, or specific ones. This can be changed later.

Set membership and user access levels for the new library, then click "Connect".

Your new SharePoint library will appear in the library menu and begin syncing. Sync status is shown in the top right of the screen.

Before proceeding: during set-up you will be able to see — and select from — every file and folder in the chosen SharePoint site, including any restricted to specific SharePoint users. Individual SharePoint user restrictions do not carry across to AutogenAI. Deselect anything you don't want synced, or set up separate libraries with different memberships if you need to restrict certain content to certain AutogenAI users.

Once integration is complete, the recommended approach is for your IT admin to remove access for SharePoint-sync-manager on Microsoft Entra, so AutogenAI retains access only to the selected site. Access can be removed at any time via Microsoft Entra to stop the sync.

Option 2: Sync by specifying sites via PowerShell

For customers who want more granular control without accepting the AutogenAI SharePoint Sync Manager app, sites can be granted access directly via PowerShell.

Prerequisites

• Access already granted to SharePoint-sync (steps 1–5 above)
• Comfort running PowerShell — see Microsoft's PnP PowerShell authentication docs
• Global Admin, plus Sites.FullControl.All or Site Collection Administrator on the target site(s)

Steps

Install the PnP.PowerShell module if you don't already have it:

Install-Module PnP.PowerShell

Then grant AutogenAI read access to the target site (replace the placeholder values):

$clientSiteUri = '<YOUR SITE URL>'
$autogenClientId = '68e7342b-03db-41a2-a816-ddf692955e22'
$autogenAppName = 'AutogenAI Sharepoint Sync'
$tenant = '<YOUR TENANT>.onmicrosoft.com'

# Optional if you already have a PnP PowerShell app with AllSites.FullControl
Register-PnPAzureADApp -ApplicationName 'PnP PowerShell' -Tenant $tenant `
    -SharePointDelegatePermissions AllSites.FullControl

$clientId = <PNP APP ID>   # from the command above

Connect-PnPOnline -Url $clientSiteUri -ClientId $clientId -Interactive

Grant-PnPEntraIDAppSitePermission -AppId $autogenClientId -DisplayName $autogenAppName -Permissions Read

Get-PnPEntraIDAppSitePermission   # confirms the permission was granted

Once complete, send the following details to your AutogenAI team — one site maps to one AutogenAI library:

Security

AutogenAI handles your data as a data processor, processing it only with your informed consent and strictly to provide the service. Your IP, confidential and sensitive information is never shared with third-party sub processors.

Eyes-off confidentiality. Your data is never used to train our AI and language models, guaranteed by strict "eyes-off" confidentiality agreements.

Privacy rights. We comply with global regulations including GDPR and CCPA, and continually review and enhance our data protection program.

Robust security measures. State-of-the-art FIPS 140-compliant encryption, regular security reviews and 24/7 onsite security.

Continuous monitoring and response. Continuous environment monitoring, incident response and risk management to address potential issues promptly.

Well-trained team. Every team member receives regular security training to uphold privacy and security standards.

External certifications. Regular external audits maintain ISO 27001:2022, Cyber Essentials Plus, CSA STAR, TX-RAMP, SOC 2 and other compliances.