Connect Microsoft SharePoint Online to Amazon Quick Suite
Learn how to connect Microsoft SharePoint Online to Amazon Quick Suite to manage lists, items, files, and Excel workbooks using natural language.
Your work happens across multiple applications. When you need to create a list item in Microsoft SharePoint, you open SharePoint, complete the task, and switch back to what you were doing. The same happens when you upload a file or update a spreadsheet. These constant switches between applications break your focus and slow you down.
Amazon Quick Suite is an AI-powered workspace that answers your questions and turns those answers into actions. Quick Suite includes Amazon Quick Sight for data visualization, Amazon Quick Flows for building automations with natural language, Amazon Quick Automate for enterprise-scale process automation, Amazon Quick Index for connecting and searching organizational data, and Amazon Quick Research for in-depth analysis across documents and datasets. With the Microsoft SharePoint Online integration, you can work with SharePoint data directly from Quick Suite using natural language, without switching applications.
This guide walks through setting up the Microsoft SharePoint Online action integration with user authentication. User authentication means each person signs in with their own Microsoft account, and actions run with their permissions. If you create a list item, it's created as you. If you're new to SharePoint, see the Terminology section below for explanations of key concepts like sites, lists, and document libraries.
Prerequisites
Before you begin, make sure you have the following:
- Amazon Quick Suite Enterprise subscription
- Microsoft 365 account with SharePoint Online access
- Access to the Microsoft Entra admin center with at least Application Developer permissions
- Permission to create app registrations in your Microsoft Entra tenant
How user authentication works
When you set up user authentication (also called three-legged OAuth or 3LO), you create an app registration in Microsoft Entra. This app registration establishes a trust relationship between Quick Suite and Microsoft's identity platform.
Each user who wants to use the SharePoint integration signs in with their Microsoft account the first time they use it. Quick Suite stores their authorization and uses it for subsequent requests. Actions run with the signed-in user's permissions. If a user can't access a SharePoint site directly, they can't access it through Quick Suite either.
This approach provides security through the principle of least privilege. Quick Suite can only do what the authenticated user can do.
Configure Microsoft Entra
Before configuring Quick Suite, you need to create an app registration in Microsoft Entra. This app provides the credentials Quick Suite uses to authenticate users.
To create the app registration:
- Open the Microsoft Entra admin center .
- In the left navigation, choose Entra ID, then choose App registrations
- Choose New registration.
- For Name, enter
Quick Suite SharePoint Action Integration - User Auth. - For Supported account types, choose Accounts in this organizational directory only. This restricts the app to users in your tenant.
- For Redirect URI, select Web from the dropdown, then enter
https://{region}.quicksight.aws.amazon.com/sn/oauthcallback. Replace{region}with the AWS Region where your Quick Suite instance is deployed (for example,us-east-1). - Choose Register.
- After registration completes, keep this page open. You need the Application (client) ID and Directory (tenant) ID values for the Quick Suite configuration.
Quick Suite needs a client secret to authenticate with Microsoft Entra.
To create a client secret:
- From your app registration, choose Certificates & secrets in the left navigation.
- Choose the Client secrets tab.
- Choose New client secret.
- For Description, enter
Quick Suite SharePoint Action Integration - User Auth Secret. - For Expires, choose an expiration period. Consider your organization's security policies when selecting this value.
- Choose Add.
- Copy the Value immediately. This value is only shown once. If you navigate away without copying it, you must create a new secret.
Important: Copy the secret Value, not the Secret ID. The Value is the longer string that starts with characters likeabc8Q~....
The app registration needs permissions to access SharePoint through Microsoft Graph.
To configure API permissions:
- From your app registration, choose API permissions in the left navigation.
- The User.Read permission for Microsoft Graph is already added by default. Leave this permission in place.
- Choose Add a permission.
- Choose Microsoft Graph.
- Choose Delegated permissions.
- Search for and select the following permissions:
Files.ReadWrite- Allows the app to read, create, update and delete the signed-in user's filesSites.ReadWrite.All- Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in useroffline_access- Allows the app to retrieve a refresh token
- Choose Add permissions.
Your API permissions should now include:
| API | Permission | Type | Description |
|---|---|---|---|
| Microsoft Graph | User.Read | Delegated | Sign in and read user profile |
| Microsoft Graph | Files.ReadWrite | Delegated | Allows the app to read, create, update and delete the signed-in user's files |
| Microsoft Graph | Sites.ReadWrite.All | Delegated | Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user |
| Microsoft Graph | offline_access | Delegated | Allows the app to retrieve a refresh token |
If your organization requires admin consent for these permissions, an administrator must grant consent before users can authenticate.
To grant admin consent:
- From the API permissions page, choose Grant admin consent for [your tenant name].
- Choose Yes to confirm.
After consent is granted, the Status column shows Granted for [your tenant name] for all permissions.
Before leaving the Microsoft Entra admin center, record the following values. You need them for the Quick Suite configuration.
| Value | Where to find it |
|---|---|
| Application (client) ID | App registration Overview page |
| Directory (tenant) ID | App registration Overview page |
| Client secret value | Certificates & secrets page (copied earlier) |
Configure Amazon Quick Suite
Now that you have the app registration configured, you can create the Microsoft SharePoint Online action integration in Quick Suite.
To create the action integration:
- Open Quick Suite (for example,
https://us-east-1.quicksight.aws.amazon.com/). - In the navigation pane, choose Integrations, then choose Actions.
- Find Microsoft SharePoint Online and choose the Add (+) button.
- On the Create integration page, configure the following:
- For Name, enter
Microsoft SharePoint Online Integration - User Auth. Adding "User Auth" helps distinguish this from service authentication integrations. - For Description, enter a description such as
Manage SharePoint lists, items, files, and Excel workbooks. See available actions for details. - For Connection type, choose public.
- For Name, enter
- Under Authentication settings, configure the authentication method:
- For Authentication method, choose User authentication.
- For Authentication type, choose Custom user based OAuth.
Configure the OAuth connection settings:
| Field | Value |
|---|---|
| Base URL | https://graph.microsoft.com/v1.0 |
| Client ID | Your Application (client) ID from Microsoft Entra |
| Client secret | Your client secret value |
| Token URL | https://login.microsoftonline.com/{your-tenant-id}/oauth2/v2.0/token |
| Authorization URL | https://login.microsoftonline.com/{your-tenant-id}/oauth2/v2.0/authorize |
| Redirect URL | https://{region}.quicksight.aws.amazon.com/sn/oauthcallback (pre-filled) |
Replace
{your-tenant-id} with your Directory (tenant) ID from Microsoft Entra. The Redirect URL is pre-filled based on your region.- Choose Create and continue.
- (Optional) Choose users or groups to share the integration with. You can assign them as owners or viewers.
- Choose Create.
After creating the integration, you need to sign in with your Microsoft account to authorize it.
To authenticate the integration:
- In Quick Suite, choose Integrations, then choose Actions.
- Find your SharePoint integration and choose Sign in.
- A Microsoft sign-in window opens. Enter your Microsoft account credentials.
- Review the permissions the app is requesting.
- (Optional) If you're an administrator and want to consent on behalf of your entire organization, select Consent on behalf of your organization.
- Choose Accept to grant the requested permissions.
Test the connection
To verify the integration is working, try a simple read action.
To test the integration:
- In Quick Suite, choose the chat icon in the top right navigation.
- In the chat footer, choose All data and apps.
- Ask the agent: "List my available SharePoint sites."
- Verify that Quick Suite returns the SharePoint sites you have access to.
Available actions
After setting up the Microsoft SharePoint Online integration, you can perform operations on lists, items, files, and Excel workbooks. The integration provides the following actions:
| Category | Action | Description |
|---|---|---|
| Lists and items | View items | Get the collection of items in a list. |
| Lists and items | Get Item | Returns the metadata for an item in a list. |
| Lists and items | Get List | Returns the metadata for a list. |
| Lists and items | Update Item | Update the properties on a listItem. |
| Lists and items | Delete Item | Removes an item from a list. |
| Files | Upload File | Provide the contents of a new file or update the contents of an existing file in a single API call. This method only supports files up to 250 MB in size. |
| Files | Search Site Drive Items | Search the hierarchy of items for items matching a query. You can search within a folder hierarchy, a whole drive, or files shared with the current user. |
| Excel workbooks | List Sheets | Retrieve a list of worksheet objects. |
| Excel workbooks | Add Sheet | Add a new worksheet to the workbook. The worksheet is added at the end of existing worksheets. |
| Excel workbooks | Read Sheet | Retrieve the properties and relationships of worksheet object. |
| Excel workbooks | Update Sheet | Update the properties of worksheet object. |
| Excel workbooks | Delete Sheet | Deletes the worksheet from the workbook. |
| Excel workbooks | Read Cell | Gets the range object containing the single cell based on row and column numbers. The cell can be outside the bounds of its parent range, so long as it stays within the worksheet grid. |
| Excel workbooks | Write Cell | Updates the value of a single cell based on row and column numbers. Allows setting cell values to strings, numbers, booleans, or objects. |
| Excel workbooks | Read Range | Gets the range object specified by the address or name. |
| Excel workbooks | Write Range | Update the properties of range object. |
| Excel workbooks | Clear Range | Clear range values such as format, fill, and border. |
| Excel workbooks | Delete Range | Deletes the cells associated with the range. |
| Excel workbooks | Get Used Range | The used range is the smallest range that encompasses any cells that have a value or formatting assigned to them. If the worksheet is blank, this function returns the top left cell. |
Tips for prompting
When working with SharePoint actions through a chat agent, keep these tips in mind.
Large lists return paginated results. When you ask to view items in a list, the agent returns the first page of results (up to 50 items by default). If your list has more items, ask the agent to "show the next page" or "get more items." You can also ask for a specific number of items, such as "show me the first 10 items in the Tasks list."
Be specific about locations. SharePoint organizes content by sites, lists, and document libraries. When asking the agent to perform an action, include the site name and list or library name. For example, "View items in the Project Tasks list on the Marketing site" is more effective than "Show me my tasks."
Excel operations require file identification. When working with Excel workbooks, you need to specify which file you want to work with. Ask the agent to search for the file first if you don't know the exact location. For example, "Search for the Q4 Budget spreadsheet" followed by "Read cells A1 to D10 from the Budget worksheet."
Cell references use row and column numbers. When reading or writing individual cells, the agent uses zero-based row and column indexes. Row 0 is the first row, column 0 is the first column. For ranges, you can use standard Excel notation like "A1:D10".
Search returns files, not content. The Search Site Drive Items action finds files by name and metadata, not by searching inside documents. To find a specific document, search for keywords that appear in the file name or properties.
Cleanup
To remove the resources created in this guide:
- In Quick Suite, choose Integrations, select your SharePoint integration, and choose Delete.
- In the Microsoft Entra admin center, choose App registrations, select the Quick Suite app, and choose Delete.
Conclusion
In this guide, I explained how to connect Microsoft SharePoint Online to Amazon Quick Suite with user authentication. You created an app registration in Microsoft Entra, configured API permissions, and set up the integration in Quick Suite. You can now manage SharePoint lists, search files, upload documents, and work with Excel workbooks directly from chat agents and automated workflows.
For more information, see the Microsoft SharePoint integration documentation .
Terminology
Before working with SharePoint through Quick Suite, it helps to understand how SharePoint organizes content:
- Site: A SharePoint site is a container for content. Your organization might have sites for different teams, projects, or departments. Each site has its own permissions, lists, and document libraries. For more information, see Introduction to SharePoint sites .
- List: A list stores structured data in rows and columns, similar to a spreadsheet. Common examples include task lists, issue trackers, and contact lists. Each row in a list is called an item. For more information, see Introduction to lists .
- Document library: A document library stores files. Every SharePoint site has at least one document library, often called "Documents" or "Shared Documents." You can create additional libraries to organize files by project, department, or purpose. For more information, see What is a document library? .
- Drive: In Microsoft Graph API terminology, a document library is called a drive. When you see "drive" in action names or responses, it refers to a document library. For more information, see Drive resource type .
- Item: An item is a single row in a SharePoint list. Items have fields (columns) that store different types of data like text, numbers, dates, or choices. For more information, see Get started with lists .
- Workbook: An Excel file stored in SharePoint. You can read and write data in workbooks without downloading them. For more information, see Work with Excel files in SharePoint .
Resources
Enjoyed reading this content? Let the author know!
Your likes, comments, shares, and saves help creators reach more builders.
Loading recommendations
Loading article