SharePoint integration for construction documents
Microsoft SharePoint connector for document retrieval, list access, and site administration via the Microsoft Graph API. All document retrieval is ACL-filtered per user identity - users see only documents their Entra group memberships grant access to.
Authentication: OAuth 2.0 via Entra ID service principal
System type: SHAREPOINT
Protocol: Microsoft Graph API v1
API reference: Microsoft Graph - SharePoint
See your SharePoint documents in Claude — book a 30-minute call.
Supported resources
Section titled “Supported resources”| Resource | FETCH | PUSH | LOOKUP |
|---|---|---|---|
sites | ✓ Yes | — No | — No |
drives | ✓ Yes | — No | — No |
documents | ✓ Yes | ✓ Yes | ✓ Yes |
lists | ✓ Yes | — No | ✓ Yes |
site_by_path | ✓ Yes | — No | — No |
site_collection | — No | ✓ Yes | — No |
document_library | — No | ✓ Yes | — No |
library_permission | — No | ✓ Yes | — No |
file_to_library | — No | ✓ Yes | — No |
LOOKUP on documents downloads a specific file. PUSH to library_permission binds an Entra security group to a library at a specified role (Read or Contribute).
Registers this connector fills
SharePoint keeps 2 registers current in Civil Memory. Each name is the record you ask for, not the system it came from - ask for it in Studio or from your own AI client.
| Register | What it holds | Fields from SharePoint |
|---|---|---|
Compliance documentscompliance_documents | Safety and compliance documents attached to projects or workers. | Fills all of 13 |
Document listdocument_list | Documents and files in your connected storage. Live, bound to connected storage, but with no published contract yet. | Fills all of 0 |
The full field list, requiredness and an example record for any register are on its published contract. Where more than one system fills a register, the register is the same shape either way.
Integration model
Section titled “Integration model”The adapter uses a service principal with application-level Graph API permissions. Only the sites and libraries you bind to the connector are read.
Site provisioning operations (creating site collections, document libraries, and binding permissions) are used in project scaffolding workflows when a new project or opportunity is created.
Connection setup
Section titled “Connection setup”Required values:
- Tenant ID
- Client ID - Entra app registration
- Client Secret
Security
Section titled “Security”Access type: Read and provisioning write
Demiton reads documents and lists from SharePoint. Document retrieval is ACL-filtered per user - each user sees only documents the Entra groups they belong to are permitted to access. The service principal’s broad permissions are used only for administrative operations (site and library provisioning); individual user data access is always mediated through group membership.
Provisioning writes (creating folder structures, setting library permissions) occur only through approved project scaffolding workflows.
Permissions required: Service principal with Sites.FullControl.All via Microsoft Graph.
What Demiton does not touch: Demiton does not modify document content, does not change user permissions directly, and does not access documents outside the group memberships of the requesting user.
Next steps
Section titled “Next steps”- Connecting a System - step-by-step wizard for setting up the connector
- Dropbox - alternative document store connector
- MCP Server - query SharePoint documents through Claude once connected
- Connect your operation - talk to us about connecting it on Baseline
Frequently asked questions
- What does the Demiton SharePoint connector do?
- The Demiton SharePoint connector reads documents and lists from Microsoft SharePoint via the Microsoft Graph API, and writes site collections, document libraries, and library permissions during project scaffolding workflows. Document retrieval is ACL-filtered per user - each user sees only the documents their Entra group memberships permit them to access. No user sees documents outside their authorised group.
- What SharePoint data can I query through Claude?
- With the SharePoint connector and the Demiton MCP server, you can query documents and lists from your connected SharePoint sites through Claude. Only the sites and libraries you bind to the connector are read. Typical use cases: project variations registers, safety incident logs, induction records, and contract documents.
- What permissions does Demiton need for SharePoint?
- Demiton requires a service principal with Sites.FullControl.All via Microsoft Graph. This broad permission is used only for administrative operations (site and library provisioning during project setup). Individual user data access is always mediated through Entra group membership - the service principal never reads data on behalf of users beyond what their groups permit.
Talk to the team
Tell us what you run - your ERP, field, payroll and document systems - and we will show you the registers Demiton would fill from them, on your data, in a 30-minute call.