SharePoint Online Integration
Connecting Kazinex Workflows to SharePoint Online routes all document uploads into your organisation's Microsoft 365 SharePoint library. Team members can then access documents both through Kazinex and directly in SharePoint or Microsoft Teams — without Kazinex acting as a separate silo.
Prerequisites
Before connecting SharePoint, ensure:
- You have a Microsoft 365 account with a SharePoint Online licence
- You can sign in to the target SharePoint site with an account that has site access
- For customer-managed or external Microsoft 365 tenants, a tenant administrator may need to approve the Kazinex app one time before a site owner can complete the connection
- You are an Org Admin in Kazinex
- You have selected the SharePoint site and document library where files should be stored
Step 1: Initiate the OAuth connection
- In Kazinex, go to Settings → Storage.
- Click Connect on the SharePoint card.
- Click Connect to Microsoft 365.
- A Microsoft sign-in popup opens. Sign in with the Microsoft 365 account that should connect the target SharePoint site.
- If your tenant allows user consent for this app, review the permissions Kazinex is requesting (read/write access to SharePoint files, list sites) and click Accept.
- If Microsoft shows an admin approval message, a tenant administrator must approve the Kazinex app for that Microsoft 365 tenant, then you can retry the connection as the site owner or org admin.
- You are redirected back to Kazinex. The SharePoint card now shows your connected Microsoft 365 tenant name.
Kazinex uses OAuth with least-privilege scopes — it requests only the permissions needed to read and write files in the selected site. No other Microsoft 365 data is accessed.
Step 2: Select a site and document library (drive)
After connecting:
- In the Site dropdown, select the SharePoint site where documents should be stored.
- Only sites the connected Microsoft account can access appear.
- Choose a site specifically created for document control (e.g. "Project Records") rather than a general team site.
- In the Drive dropdown, select the document library within the site (e.g. "Documents", "Project Files").
- SharePoint sites can have multiple document libraries. Select the one designated for Kazinex uploads.
- Click Next.
Step 3: Set the folder path
Select the folder within the chosen drive where Kazinex should store files. A folder tree picker displays the library's folder structure.
- Navigate through the tree and select the root folder for Kazinex uploads (e.g.
/Controlled Documents). - Kazinex will create sub-folders automatically under this root:
/{project-name}/{document-number}/{revision}/. - You can select an existing folder or create a new one using the New Folder button in the picker.
Click Save.
Step 4: Verify the connection
After saving, click Test Connection on the SharePoint card.
Kazinex performs three checks:
- OAuth token is valid
- The selected site and drive are accessible
- A test file can be written to (and then deleted from) the selected folder
If all checks pass, the card shows Verified. If any check fails, the error message describes the specific problem (e.g. "Folder not found" or "Insufficient permissions").
File organisation in SharePoint
Files uploaded through Kazinex appear in SharePoint under the folder path you configured, with the following sub-structure:
/[Root Folder]/
/[Project Name]/
/[Document Number]/
/Rev A/
drawing-rev-a.pdf
/Rev B/
drawing-rev-b.pdf
Team members browsing SharePoint can navigate to any project folder to find documents. Each revision is a sub-folder.
File names in SharePoint match the original filename uploaded by the member. If your organisation has SharePoint naming conventions, train members to follow them before uploading.
Permissions in SharePoint
Kazinex uses its own OAuth connection — documents are uploaded under the Kazinex service account. SharePoint folder-level permissions apply independently of Kazinex access control. If you need to restrict SharePoint-side access, configure SharePoint folder permissions separately.
SharePoint site ownership and Microsoft Entra tenant consent are separate controls. A site owner can choose the site, library, and folder only after the Microsoft 365 tenant allows the Kazinex app to be used in that tenant.
Access control within Kazinex (roles, access control groups, confidentiality flags) does not propagate to SharePoint — it applies only within Kazinex.
Reconnecting after token expiry
Microsoft OAuth tokens expire after a period of inactivity. If the SharePoint card shows Error, the token may have expired:
- Click Reconnect on the SharePoint card.
- Sign in again with the Microsoft 365 account that should manage the SharePoint connection.
- The connection is re-established with a fresh token.
Disconnecting SharePoint
To disconnect SharePoint:
- Go to Settings → Storage.
- Click Disconnect on the SharePoint card.
- Confirm the disconnection.
Disconnecting removes the OAuth token from Kazinex. Existing documents stored in SharePoint remain there — they are not deleted. However, they cannot be downloaded through Kazinex until you reconnect or migrate to another provider.
What's next
- R2 Cloudflare Setup — S3-compatible alternative
- Supabase Storage — default built-in storage
- File Restrictions — limit file types and sizes