OneDrive and SharePoint

Explore 6 actions and their permissionsExact inputs, sign-in scopes, access limits and approval rules.

With OneDrive and SharePoint, a hire can:

• find files by the words in their name or content,
• list what's in a folder,
• read a file as text: Word, Excel, PowerPoint and OpenDocument files, which Roster turns into text itself, and text files (txt, md, csv, json…). Of a large text file it reads the start. Other files (PDFs, images) show their name, size and date only, never their content.

If you allow changes, a hire can also:

• upload text as a file. It never overwrites a file: replacing one asks a person first.
• make a sharing link to a file, view only, for people in your organisation or for anyone, for up to a year (30 days unless it says otherwise). This always asks a person first.
• delete a file. This always asks a person first. It goes to the recycle bin.

Hires never see the sign-in. Passwords and keys written inside files are hidden from hires when they read them.

1. Register an app in Microsoft EntraCopy Anchor Link

If you already registered one for Outlook or Outlook Calendar, use the same app: add the permissions below, and use its client ID and secret here too.

1. Open entra.microsoft.com: App registrations → New registration.
2. Supported account types: this organisation only, for one company.
3. Redirect URI: Web, the address Roster shows on the connection. It ends in /api/integrations/onedrive/oauth/callback.
4. API permissions → Add a permission → Microsoft Graph → Delegated: Files.Read.All and Sites.Read.All, or Files.ReadWrite.All and Sites.ReadWrite.All to allow changes; and offline_access. Grant admin consent if your organisation asks for it.
5. Certificates & secrets → New client secret. Copy the secret's value and the Application (client) ID.

2. Connect it in RosterCopy Anchor Link

1. Open Integrations → Tools → Add a tool, search for OneDrive and choose OneDrive and SharePoint.
2. Paste the client ID and secret, and your Tenant (your organisation's domain or tenant ID).
3. What hires may do: Find and read files, or also upload, share and delete. Changing this later means connecting again.
4. Click Connect with OneDrive and SharePoint and sign in.

Hires see what that Microsoft account can see. Sign in with an account made for Roster, with access only to what hires should use.

3. Give hires accessCopy Anchor Link

On the hire's Tools tab, click Give access on OneDrive and SharePoint. Read only gives the reading tools; Read and write adds upload, links and delete (if the connection allows changes).

• Drives and folders, one per line:

  • me: the signed-in account's own OneDrive,
  • a SharePoint site, like contoso.sharepoint.com/sites/Finance (its documents library),
  • or a drive ID,
  • each with an optional folder after :, like me:/Clients or contoso.sharepoint.com/sites/Finance:/Invoices/2026.

  Files in subfolders count. Leave it empty for everything the account can see (searches then look in its own OneDrive).

When it asks firstCopy Anchor Link

You can change this per hire on the hire's Tools tab, under When it asks first.

If something goes wrongCopy Anchor Link

• "Isn't connected yet": click Connect with OneDrive and SharePoint on the connection.
• A site can't be found: check the site's address, and that the signed-in account can open it.
• Links for anyone fail: your organisation may allow only links for people inside it.
• A PDF isn't read: PDFs aren't read as text yet.

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "text": {
      "type": "string",
      "minLength": 1,
      "maxLength": 200,
      "description": "words to look for"
    },
    "folder": {
      "type": "string",
      "minLength": 1,
      "maxLength": 1024,
      "description": "a folder's ID, in [brackets] in list_folder and search_files"
    },
    "limit": {
      "default": 20,
      "type": "integer",
      "minimum": 1,
      "maximum": 50
    }
  },
  "required": [
    "text"
  ]
}

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "folder": {
      "description": "a folder (ID); leave out for the top",
      "type": "string",
      "minLength": 1,
      "maxLength": 1024
    },
    "limit": {
      "default": 50,
      "type": "integer",
      "minimum": 1,
      "maximum": 200
    }
  }
}

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "file": {
      "type": "string",
      "minLength": 1,
      "maxLength": 1024,
      "description": "the file's ID, in [brackets] in list_folder and search_files"
    }
  },
  "required": [
    "file"
  ]
}

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "folder": {
      "type": "string",
      "minLength": 1,
      "maxLength": 1024,
      "description": "a folder's ID, in [brackets] in list_folder and search_files"
    },
    "name": {
      "type": "string",
      "minLength": 1,
      "maxLength": 200,
      "description": "the file's name with its extension, like summary.md or rates.csv"
    },
    "text": {
      "type": "string",
      "maxLength": 1000000,
      "description": "the file's whole content, as text"
    },
    "replace": {
      "default": false,
      "description": "replace a file of the same name (asks a person first)",
      "type": "boolean"
    }
  },
  "required": [
    "folder",
    "name",
    "text"
  ]
}

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "file": {
      "type": "string",
      "minLength": 1,
      "maxLength": 1024,
      "description": "the file's ID, in [brackets] in list_folder and search_files"
    },
    "audience": {
      "default": "organization",
      "description": "anyone with the link, or only people signed in to the organisation",
      "type": "string",
      "enum": [
        "organization",
        "anyone"
      ]
    },
    "expires_in_days": {
      "default": 30,
      "description": "when the link stops working",
      "type": "integer",
      "minimum": 1,
      "maximum": 365
    }
  },
  "required": [
    "file"
  ]
}

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "file": {
      "type": "string",
      "minLength": 1,
      "maxLength": 1024,
      "description": "the file's ID, in [brackets] in list_folder and search_files"
    }
  },
  "required": [
    "file"
  ]
}