Skip to main content
Læs siden på dansk You connect SharePoint by logging in at Microsoft with your work or school account and approving Consile. Consile stores the resulting access encrypted per customer. Your AI never sees the access itself, only answers to your questions. The connection covers both SharePoint and OneDrive. See SharePoint for what the connector can do.
You need an active SharePoint subscription in the portal, or the system must be included in your plan (the free edition or the Consile Studio membership). You must log in with a Microsoft work or school account in an organization that has SharePoint and OneDrive in Microsoft 365. Your AI (Claude or ChatGPT) can be added before or after.
The connection applies to your whole Consile account. All users with access to SharePoint in Consile read through the Microsoft user that is connected, and so see the same sites and files, even if a colleague connected it. Anyone on the team can connect an agreement that is not connected yet. Only an administrator can reconnect it or disconnect it, because that changes the connection for everyone. If an administrator reconnects with a different Microsoft account, it replaces the existing connection.

​
Choose the right Microsoft user

The Microsoft user you log in with decides what your AI can see: the sites, libraries, files and lists that user has access to. The user’s own OneDrive is included. When a colleague asks their AI for “my OneDrive” or “my recent files”, it is the connected user’s files that are shown. So connect with a user whose access fits what everyone with SharePoint in Consile may see. If you connect with your own account, colleagues with access can read your OneDrive through their AI.

​
How to connect

1

Open the connector in the portal

Go to SharePoint in the portal. Click Connect now at the top of the page, or Connect next to the agreement on the Connections card. The portal calls each connection to the system an agreement. Right after the purchase, the Connect SharePoint button on the Subscription activated page takes you to that page. If you have not accepted Consile’s terms yet, you are asked to do so first.
2

Authorise access

In the Connect Microsoft step, the portal shows the three permissions Consile asks Microsoft for: Sites.Read.All, Files.Read.All and offline_access. Click Authorise access. You are sent to Microsoft’s login.
3

Log in with your work account

Log in with the Microsoft work or school account that should be connected. Microsoft refuses a login with a personal Microsoft account.
4

Confirm with Microsoft

Microsoft shows what Consile is asking to access on your behalf: reading SharePoint sites and files, and keeping that access. Confirm to continue. You are then sent back to the portal.
The portal shows SharePoint is connected, and the agreement shows as Connected. On the connector’s page, the agreement is named after your root site and your SharePoint address, for example <site name> (<company>.sharepoint.com). Your AI can now read your SharePoint and OneDrive. If you have not already added the address https://mcp.consile.ai/sharepoint/mcp in your AI, do it now.
The connection is shared by the whole company, so colleagues do not have to connect SharePoint again. An administrator gives them access under Team, and each colleague adds the address in their own AI and logs in with their own Consile login. See Team.

​
If Microsoft asks for administrator approval

Sites.Read.All and Files.Read.All give access to all the sites and files the user can see. That is why many organizations do not let ordinary users approve them themselves. Microsoft then shows a message that an administrator must approve the app, and the connection cannot be completed yet. There are two ways forward:
  • A Microsoft administrator approves for the whole organization. The administrator (for example a Global Administrator) clicks Connect in the Consile portal and logs in. On Microsoft’s consent screen, the administrator ticks Consent on behalf of your organization and approves. Afterwards, other users in the organization can approve Consile without an administrator. Remember that the connected user decides what your AI sees. If the connection should belong to another user, a Consile administrator reconnects afterwards with the right account.
  • The user asks for approval. If your organization has turned on Microsoft’s admin consent workflow, the user can send a request from Microsoft’s message. Once an administrator has approved it in the Microsoft Entra admin center, the user starts the connection over in the portal.
Contact your Microsoft administrator, or write to support@consile.dk, if you are in doubt.

​
What exactly am I approving?

Read-only

Sites.Read.All and Files.Read.All are Microsoft’s pure read permissions. The access cannot create, change or delete anything. Consile has no write tools and only sends read requests. offline_access gives the renewable access that keeps the connection alive.

SharePoint and OneDrive only

The approval does not give access to Outlook, Teams or other Microsoft services. If Microsoft’s approval contains access to services other than Microsoft Graph, the connection is refused.

Encrypted per customer

Consile stores the access encrypted with a key that applies only to your account, and never logs it. It is renewed automatically in the background. Your files are not stored at Consile.

Your AI never sees it

Your AI is never given the access itself, only answers to your questions.

​
The access is renewed, but the connection can stop

Consile renews the access automatically, so you do not have to reconnect during normal use.
If the renewal fails, or Microsoft refuses the access (for example because Consile has been removed in your Microsoft organization), your AI is told that the connection must be set up again from the Consile portal. The portal can still show Connected, because the stored access is still there.
How an administrator reconnects:
  • If the agreement says Access revoked, click Reconnect, and follow the steps above.
  • Otherwise: click the menu (the three dots) next to the agreement on the Connections card, choose Disconnect, and confirm with Disconnect. Then click Connect, and follow the steps above.
  • You can also ask your AI for a new connection link. Ask in the connector that belongs to the agreement (for example sharepoint-2), so the link connects exactly that agreement.
If you reconnect with an account in a different Microsoft 365 organization than before, the page after the connection says Note: This portal is now connected to a different account than before. Check the portal list if that wasn’t intended. The word portal here means agreement.
If your AI is instead told that SharePoint answered 403, the connected user lacks access to the site or file, or your Microsoft administrator has not approved the permission. Reconnecting does not help. Ask a Microsoft 365 administrator to give the user access.

​
If the connection fails

If the approval does not succeed, the portal shows Connection was not completed and a technical reason. The most common ones:
  • token_exchange_failed: Microsoft did not send back a valid approval, typically because you cancelled at Microsoft, or because an administrator must approve the app first. Try again, and approve the access. See If Microsoft asks for administrator approval.
  • unexpected_scope: the approval contained access to something other than Microsoft Graph. Try again.
  • no_refresh_token: Microsoft did not return renewable access. Try again.
  • state_expired, invalid_state or state_unknown_or_consumed: more than 10 minutes passed, or the same approval was used twice (for example with the browser’s back button). Start over in the portal.
Click Try again to get back to the connector’s page, and start over with Connect now or Connect. If that does not help, write to support@consile.dk and include the technical reason.

​
Multiple Microsoft 365 organizations

One agreement covers everything in your Microsoft 365 organization (your tenant at Microsoft) that the connected user has access to. If you have several organizations at Microsoft, you add one agreement per organization.
1

Add an agreement

Open SharePoint in the portal. On the Connections card, an administrator clicks Add agreement (149.50 kr/mo.). The agreement is added to the existing subscription and charged pro rata for the rest of the period.
2

Connect the agreement

When the new agreement is ready (typically after a few seconds), click Connect next to it and log in with a work account in the other organization.
3

Add the address in your AI

Each agreement has its own address, for example https://mcp.consile.ai/sharepoint-2/mcp. Copy it from the card, and add it as an extra connector in your AI.
One agreement applies to one Microsoft 365 organization. If you connect a new agreement with an organization that another agreement is already connected to, even with a different user, the existing agreement is updated instead, and the page says Note: This account was already connected as another portal, so that connection was refreshed instead. The new slot is still free. The word portal here means agreement. The new agreement stays unconnected and can be used for another organization. Under the Consile Studio membership the Add agreement button has no price, and the card says The membership gives one agreement per client you have created in Studio, plus your own. In the free edition there is one agreement per system, and the card says More agreements per system come with the membership. An administrator removes an agreement with the menu next to it: choose Remove the agreement, and confirm with Remove agreement. If you remove an agreement that is not the last one, the last agreement moves up into the free slot and takes its address (for example https://mcp.consile.ai/sharepoint-2/mcp instead of https://mcp.consile.ai/sharepoint-3/mcp). You must update the address in your AI. You remove the last agreement by cancelling the subscription under Subscription. Under the membership, no agreement moves up: the other agreements keep their number and address.

​
Revoke access

You can remove the access again at any time:
  • In the portal: an administrator clicks the menu (the three dots) next to the agreement on the Connections card, chooses Disconnect and confirms with Disconnect. The stored access is deleted at Consile right away. The subscription continues until an administrator cancels it under Subscription. If you have several agreements, an administrator can also remove an agreement entirely with Remove the agreement. Its access is then deleted too.
  • At Microsoft: the approval stays in your Microsoft organization until you remove it yourselves. If you also want to remove it, an administrator does so under Enterprise apps in the Microsoft Entra admin center. Shortly after, the connector stops working, but the portal can still show it as Connected until you disconnect it in the portal.
  • When the subscription ends: if you cancel SharePoint under Subscription, Consile automatically deletes the stored access when the subscription ends. If a payment is only late, the tools do not work in the meantime, but the stored access is kept, so the connection works again without a new approval once the payment is in place.
More about data processing in Security & data.