Connect Underlag to the firm's Microsoft 365

For the person who runs the firm's Microsoft 365, often the firm's IT supplier. It takes about ten minutes. Underlag may write to one SharePoint site that you choose. Underlag cannot read other sites, OneDrive, mail, calendar or Teams.

What you need

An account in the firm's own Microsoft 365 with the role Global Administrator or Privileged Role Administrator. Do not sign in with a guest account or with an account in your own organisation.
A SharePoint site with a document library called Client uploads. Underlag reaches the whole site, so best make a site of its own for the clients' files.
The firm's company number and the e-mail address where the firm wants replies from clients.

Steps

Go to underlag.aldorock.com and choose Sign in. Sign in with the admin account. The firm is created in Underlag and you become its owner.
Fill in the firm's name, company number and the e-mail for replies from clients. Tick that the firm is run as a business and choose Save and continue.
Choose Storage in the menu, then Start with A. Microsoft shows that Aldorock Underlag from Aldorock AB asks for Sites.Selected and sign in. Choose Accept. You come back to Underlag.
Give Underlag write access to the site. Open Graph Explorer at aka.ms/ge and sign in with the same account. Read the site's id with GET. Graph Explorer then asks for Sites.Read.All. Then run POST with the id. For the POST, approve Sites.FullControl.All under Open the permissions panel. The answer should be 201 Created. These approvals are for Graph Explorer, not for Underlag.
The root site on the first line, a site with a path on the second:
```
GET https://graph.microsoft.com/v1.0/sites/root?$select=id,webUrl
GET https://graph.microsoft.com/v1.0/sites/BYRAN.sharepoint.com:/sites/KLIENTER?$select=id,webUrl

POST https://graph.microsoft.com/v1.0/sites/{site-id}/permissions
{ "roles": ["write"], "grantedToIdentities": [{ "application": { "id": "8ef40036-9c1b-4f62-9439-1e2f93f9b3b9", "displayName": "Aldorock Underlag" } }] }
```
Type the site's address in Underlag and choose Save and connect. Underlag finds the library Client uploads and shows Storage is connected.
Hand over to the firm. Ask the person who will run Underlag to sign in. In Settings, choose Approve, Make administrator and Make owner for that person. Approve the others at the firm the same way.

Remove the access

In Microsoft Entra under Enterprise applications, Aldorock Underlag, Properties, Delete. Remove the write access to the site in Graph Explorer with DELETE on the same address as the POST, with the permission's id at the end.

Questions: support@aldorock.com. If you would rather do it together, we go through it on Teams in 15 minutes.