SharePoint Online Connector Prerequisites

For the authentication mechanism-specific requirements, see the following pages:

Connector Features and Requirements

Features	Supported	Additional Information
SharePoint version	Online	Cloud-based
Searchable Content Types	Yes	The SharePoint Online connector enables: Connecting to SharePoint Online Fetching data from any: site document library list Indexing this content securely By default the connector omits some system level properties typically not needed for indexing purpose. If you want to change the list of omitted properties: Edit the Connector's web.config file to specify which properties should be returned.
Content Update	Full and Incremental	All BA Insight Connectors support both Full and Incremental crawls, unless noted.
Permission Types	Yes	All BA Insight Connectors support fetch ACLs from the source system Your Source System is the repository where your data is stored (data to be indexed). This repository is managed by applications such as: - SharePoint O365 - SharePoint 2013/16/19 - Documentum - File Share - OpenText - Lotus Notes - etc. Your Source System repository can also be a database such as SQL or Oracle.. To make items *public* or *restricted* to a single user or set of users, you can do so within Connectivity Hub.
Required Software	.NET Framework v4.7.2 SharePoint Azure App Certificate BA Insight Connectivity Hub	A SharePoint Online Azure App must be registered with Azure and must have permissions as described in the table below. See "How to Verify SharePoint Connector Azure API Permissions" to add permissions to the registered app. Certificate Details: A certificate is required The SharePoint Online Connector supports certificate authentication only Self-signed certificates may be used If the certificate is installed to LocalMachine\Trusted Root (LocalMachine\Root), local administrator rights are required. Alternatively, if the certificate is installed to the Current User Personal store (CurrentUser\My) for the service account, local administrator rights are not required. Connector Framework Support: BA Insight Connectivity Hub is supported BA Insight Connector Framework is NOT supported

User Accounts and Application Permissions

Required Permission	Description
Azure	You must have: Access to the Azure Portal site Permission to create and manage Azure app registrations.
Azure App permissions	The SharePoint Online connector supports both authentication mechanisms: Username/App Certificate/App The permissions required for each mechanism are detailed on the respective topics.
Windows	The account used to run the connector: Must be a local Administrator on the server. Cannot be any of the built-in service accounts (NetworkService Local account used by the service control manager. Not recognized by the security subsystem, so you cannot specify its name in a call to the LookupAccountName function. Has minimum privileges on the local computer and acts as the computer on the network.,local machine, etc.)
Recommendations: Loading Users and Groups	When indexing a tenancy containing thousands of site collections, BA Insight recommends using a master security connection Connection defines the how Connectivity Hub connects to your Source System (which contains your documents, graphics, etc.,). Your Connection includes identifying elements such as: URL of the BA Insight web service connector you are using, (File Share connector, SharePoint Online connector, etc.), Authentication mode, User Accounts and Credentials, Database information (for database connectors) to load all users and groups for all site collections in tenancy into a single master security map. You can then create specific connections to split all the site collections to index into more manageable pieces and reference the master security map for users and groups.