To extract and index documents stored in Microsoft SharePoint, the Locator SharePoint connector needs to be configured with a user that has access to all the documents that are to be extracted. This user is referred to as the index user.
...
| Additional user type | Required permissions |
|---|---|
| Separate user for authentication and identification | Requires "Read for index user" custom permission or Site Collection Administrator on each site collection.the root site (https://[tenant].sharepoint.com) or site specified in wizard |
| Multiple index users | Each additional index user requires exactly the same permissions as main index user. |
...
- If any of the "Include Office 365..."-checkboxes in wizard is used for specific site collection templates
- If "Include other site templates" is checked in the wizard and some of the templates were selected.
Note 3: Global admins and SharePoint admins don't have automatic access to Group Sites. That means they can not manage permissions inside Group Sites. However global admins still have option to add members and owners to Group Sites.
...
| Excerpt |
|---|
Configuring Windows Azure Active Directory Setting up the Windows Azure Graph API for Locator
The screenshot above has the application Id we need. The two menu options that are to be used for creating and obtaining the client secret, are circled in red and will be used in the following screenshots:
|
Adding Permissions to the Azure AD Application for SharePoint Online indexing
...