This topic provides guidelines for selecting a flow for Microsoft 365 configuration. You must consult your organization's SharePoint or Azure configuration team before finalizing the Microsoft 365 configuration approach. You can choose to configure Sharepoint or Azure App according to your requirements.
During Microsoft 365 review, SharePoint temporarily stores agreement documents when a review cycle is initiated. Agreement documents are removed once the review cycle is ended in CLM. Hence, you must provide the required permissions for users to access the stored files.
You can create a dedicated site in your organization's SharePoint and use the configuration details while configuring Microsoft 365 feature in CLM. If you do not create and configure a dedicated site in your organization's SharePoint, Microsoft 365 uses your organization's default site.
You can create a folder in the configured SharePoint site and use the folder details while configuring Microsoft 365 feature in CLM. If you do not create a folder, SharePoint creates a default folder in the configured SharePoint site and adds all CLM agreement documents to the default folder.
You must use Azure to communicate between CLM and SharePoint. You can create an app in your Azure portal.
You must provide the required permissions to the Azure app for all the reviewers to allow the Azure app to create folders and files. You can use one of the following flows to facilitate interaction between the Azure app and SharePoint.
- Application Flow
- Delegated Flow
The Azure app can directly interact with SharePoint without any user interference. There is no need for user permission or user interference. For more information, see Application permissions and Application access.
The Azure app cannot interact with SharePoint without user interference. Both the review initiator and the Azure app must have permission to create a folder or file and add permission in SharePoint. When sending a document for review, the review initiator must log in every time. Hence, this is a restrictive flow. For more information, see Delegated permissions and Delegated access.
The app creation and configuration are different for the application and delegated flows. You must select a flow that is appropriate to your organization's policy.