Delegated permissions

Prerequisites

• Set up and configure App registration in Azure Portal. This acts as a bridge between Business Central and SharePoint.
• SharePoint site and its associated document library.
• Configure the Shop Floor Production Setup page in Business Central.
  To connect Aptean Food and Beverage to SharePoint, you need the following information:
  • Client ID of the app registration
  • Client secret of the app registration
  • SharePoint URL
  • Document library name

After completing these steps, upload your PDF work instructions and assign each document to a specific work center and item in Business Central.

App registration

To get started, follow the below steps: 

1. Open the Azure Portal and log in with your credentials.

2. Once logged in, select the All Services menu.

   

   The All services page opens.

3. On the search bar, enter App registrations and then select the related link from the results.

   

4. On the App registration page, select New registration.

   

5. In the Name field, enter the name of the desired application.

6. In the Supported account types field, select the Accounts in this organizational directory only (....) option.

   

7. In the Redirect URI (Optional) section, in the Select a platform dropdown, select Web.

8. Enter https://businesscentral.dynamics.com/OAuthLanding.htm as the redirect URL.

9. Select Register to complete the application registration process.

   

   Your desired application has been registered. You can view the client ID and the related information on the page. Make sure to note this value, as it will be required later in the setup process.

   

10. On the menu bar, select Certificates & secrets.

    

11. Select New client secret.

    

    The Add a client secret window opens.

12. In the Description field, enter a description for the client secret.

13. In the Expires field, select the desired expiration period for the client secret.

    

14. Select Add.

15. After the secret is added, copy the data in the Value field to your clipboard from the Client secrets tab. Make sure to save this value, as it is needed later in the setup. Once you navigate away, it is no longer visible. If the secret value is lost, create a new secret key.

    

16. On the menu bar, select Overview.

Configure API permissions

To configure the necessary API permissions, follow these steps:

On the menu bar, select API permissions.

Add Microsoft Graph permissions for sites

1. Select + Add a permission.
   The Request API permissions page opens.

   

2. On the Request API permissions page, select Microsoft Graph > Delegated permissions.

   

3. In the Select permissions filter, enter Sites to view the list of permissions for sites.

4. Select the Sites.ReadWrite.All checkbox.

   

5. Select Add permissions.

Add Microsoft Graph permissions for user

1. Select + Add a permission.
2. Select Microsoft Graph > Delegated permissions.
3. In the Select permissions filter, enter User to view the list of permissions for user.
4. Select the User.Read checkbox.

5. Select Add permissions.

   

Add SharePoint permissions for all sites (Read)

1. Select + Add a permission.
   The Request API permissions page opens.
2. On the Request API permissions page, select SharePoint > Delegated permissions.
3. In the Select permissions filter, enter All Sites to view the list of permissions for all sites.
4. Select the AllSites.Read checkbox.
5. Select Add permissions.

Add SharePoint permissions for all sites (Write)

1. Select + Add a permission.
2. Select SharePoint > Delegated permissions.
3. In the Select permissions filter, type All Sites to view the list of permissions for all sites.
4. Select the AllSites.Write checkbox.

5. Select Add permissions.

   

Once all the necessary permissions are added, your API permissions will be configured.

App registration is complete. Make sure to record the following two fields to proceed:

• Client ID
• Secret Value

Admin consent is not required but providing it can make the setup process more convenient.