> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trybrink.com/llms.txt
> Use this file to discover all available pages before exploring further.
# OneDrive & SharePoint
> Sync OneDrive folders and SharePoint document libraries into Brink
One connector covers both Microsoft file stores: your **OneDrive** folders and your **SharePoint** document libraries. Files flow into Brink's Document Center — versioned, parsed (with OCR for scans), classified, and searchable with page-level citations.
**Who can connect:** organization owners and admins for a shared connection; any member can connect their own OneDrive from **Profile → My integrations**.
**Work and school accounts only.** Brink signs you in through Microsoft's
organizational endpoint, so a personal Microsoft account (outlook.com,
hotmail.com, live.com) cannot be used — personal accounts have no SharePoint
sites at all.
## Connect OneDrive & SharePoint
On the **Integrations** page, click the **OneDrive & SharePoint** card, then **Connect OneDrive & SharePoint**.
For a personal connection, go to **Profile → My integrations** and click **Connect** instead.
Sign in with your work or school account and approve the requested permissions: read your files (`Files.Read.All`), read SharePoint sites (`Sites.Read.All`), read your profile (`User.Read`), and stay signed in (`offline_access`). All of them are read-only.
In many Microsoft 365 tenants these are **admin-consent** permissions — a Microsoft 365 administrator may have to approve them before the connection works.
Brink returns you to the Integrations page and opens **Bind folders to a project** automatically. Pick the **Project**, tick what Brink should sync, and click **Bind *n* folders**. Choose **Skip for now** to bind later.
The picker is a drill-down. The top level (**All locations**) lists **All files (root)** — your own OneDrive — followed by every SharePoint **Site** you can see. Click **Open** on a site to list its document **Libraries**, then **Open** a library to walk into its folders. Tick any row to bind it; already-bound rows are marked **Bound**.
An organization connection with **no binding syncs nothing at all** — Brink
will not walk an entire tenant's files and publish them org-wide. Bind at
least one folder or library to finish the setup.
To add bindings later, open the **OneDrive & SharePoint** card, and on the account click **Bind folders** — the same picker opens. You can also bind from a project's **Integrations** tab on the **Projects** page.
Bindings are drive-aware: the same folder name in two different SharePoint
libraries stays two separate bindings, and you can bind one library into
several projects.
## What gets synced
Every file in each bound folder or document library, including all of its subfolders, flows into the Document Center — stored, versioned, read page by page (with OCR for scans), and made searchable, keeping the page and line behind every citation.
* **Unchanged files are skipped.** Brink compares each file's content version against what it already holds, so renaming a file does not re-ingest it and a re-sync downloads only what actually changed.
* **Deletions carry over.** A file deleted in OneDrive or SharePoint is marked deleted in Brink, and so is a file moved out of a bound folder.
* **Renames and moves are tracked** by the file's identity rather than its path, so a reorganized library does not produce duplicates.
Very large files are recorded by name and location but not read — Brink's
per-file limit is 300 MB by default.
## Use your own Microsoft app
By default Brink connects through Brink's own Microsoft app. Organization owners and admins can instead point this connector at **their own Microsoft Entra ID app registration** — the usual reason is a tenant policy that only permits apps registered in-house.
Open **Integrations → OneDrive & SharePoint → Connection method**. The card shows which app is in use (**Brink's app**, badged *Default*, or **Your own OneDrive & SharePoint app**, badged *In use*). Click **Use your own OneDrive & SharePoint developer app** to expand the panel.
Pointing this connector at your own app does **not** affect Outlook, Outlook
Calendar, or Microsoft Teams — they keep using their own app settings.
### Register the app in Microsoft Entra ID
You'll need an account that can create app registrations in your tenant. It takes about 10 minutes, once per organization.
In the [Azure portal](https://portal.azure.com/), open **Microsoft Entra ID → App registrations → New registration**. Name it something recognizable, such as `Brink Connector`.
For **Supported account types**, choose **Accounts in this organizational directory only** if you only ever connect accounts from your own tenant, or **Accounts in any organizational directory (multitenant)** if you also connect accounts from partner tenants. Do not choose an option that includes personal Microsoft accounts — Brink does not use them.
In Brink, open **Integrations → OneDrive & SharePoint → Connection method → Use your own OneDrive & SharePoint developer app** and copy the value under **Redirect URI — add this to your app's allowed redirect URIs**.
In the app registration, open **Authentication → Add a platform → Web**, paste the URI, and save. It must match character-for-character.
Open **API permissions → Add a permission → Microsoft Graph → Delegated permissions** and add:
| Permission | What it's for |
| ---------------- | ----------------------------------------------------- |
| `Files.Read.All` | Reading the files in bound folders and libraries |
| `Sites.Read.All` | Listing SharePoint sites and their document libraries |
| `User.Read` | Identifying the account that connected |
| `offline_access` | Keeping the connection alive without re-authorizing |
Then click **Grant admin consent for \**.
Without `Sites.Read.All` the connector still works, but the picker shows **only** your OneDrive — no SharePoint sites at all.
Open **Certificates & secrets → Client secrets → New client secret**, pick an expiry, and copy the secret **Value** immediately — Azure only shows it once. Then open **Overview** and copy the **Application (client) ID**.
### Save it in Brink
Back in the Brink drawer, paste the values into **OneDrive & SharePoint OAuth client ID** and **OneDrive & SharePoint OAuth client secret**, then click **Save credentials**. The secret is stored encrypted and write-only — once saved it is only ever shown masked.
Only the fields you fill in are saved, so you can rotate the secret later without retyping the client ID.
Click **Connect OneDrive & SharePoint** and authorize as usual. Existing connections keep working; the next connect uses your app.
To go back, click **Use Brink's app instead** in the same panel and confirm.
## Notes
* OneDrive & SharePoint syncs on the regular schedule, roughly every **15 minutes**. You can force one at any time with **Sync now**.
* **No SharePoint sites in the picker?** The picker shows the hint *"Don't see your SharePoint sites? Reconnect OneDrive to grant site access."* — connections made before Brink asked for site access list only OneDrive. Click **Reconnect** on the account and approve the permissions again.
* A **personal** connection with no binding covers your whole OneDrive, and everything from it stays visible only to you.
* Microsoft offers no way for Brink to revoke its own access. Disconnecting deletes Brink's stored credentials; a Microsoft 365 admin can also remove the app under **Entra ID → Enterprise applications**.