Loading

Error 'You are not authorized to perform that operation' in Files Connect Office 365

Veröffentlichungsdatum: Jun 11, 2026
Beschreibung

 

Issue

When using Salesforce Files Connect with a SharePoint Online (Office 365) external data source, Chatter users may encounter one of the following errors:

  • "You are not authorized to perform that operation" when browsing SharePoint files
  • "An unknown error occurred while accessing Files Connect" when an administrator tries to validate or sync the external data source
  • "Can't access external source, External data source is unavailable because of an error"

These errors occur even when the SharePoint external data source appears as Authenticated in the Salesforce External Data Sources setup page.

Cause

The Permission Request XML in the SharePoint Online app registration contains an incorrect Scope value. A common mistake is entering the company's SharePoint domain name as the Scope, instead of one of the three valid SharePoint permission scope values.
Additionally, verify that the External Data Source in Salesforce Setup that corresponds to the SharePoint repository has the correct Site URL configured. See External Data Source setup for SharePoint Online for more details.


Also verify that the External data source in Salesforce setup that corresponds to the Sharepoint repository has the correct Site Url: See for more details.

Lösung

To resolve the "You are not authorized to perform that operation" error in Salesforce Files Connect Office 365, the Permission Request XML Scope must exactly match one of the three valid SharePoint permission scope values. Follow the steps below to update the Scope in your SharePoint app registration.

Resolution Steps

  1. On SharePoint, navigate to: https://[sharepoint domain]/[site collection path]/_layouts/15/appinv.aspx
  2. Enter the Client ID of the SharePoint app you created. This value is the consumer key of the Authentication Provider you created in Salesforce Setup.
  3. Click Lookup.
  4. Click Create. This does not create a new SharePoint app — it only updates the existing app's permissions.
  5. In the Permission Request XML field, enter a correct Scope value from the three valid options listed in Create an Authentication Provider for SharePoint Online or OneDrive for Business Using Office 365 (Alternate Method) — specifically in the "Register an Office 365 app" section, Step 6.

Example Permission Request XML

The following is an example Permission Request XML for connecting to a single site on SharePoint Online. The Scope value must be one of the three exact values specified in the Salesforce help documentation — do not substitute your company's SharePoint domain name.
The Permission Request XML format is:
AppPermissionRequests containing an AppPermissionRequest element where Scope is set to "http://sharepoint/content/sitecollection/web" and Right is set to "Read".


 Create an Authentication Provider for SharePoint Online or OneDrive for Business Using Office 365 (Alternate Method) 
Create an Authentication Provider for SharePoint Online or OneDrive for Business

Nummer des Knowledge-Artikels

000386960

 
Laden
Salesforce Help | Article