Error 'You are not authorized to perform that operation' in Files Connect Office 365

To resolve the "You are not authorized to perform that operation" error in Salesforce Files Connect Office 365, the Permission Request XML Scope must exactly match one of the three valid SharePoint permission scope values. Follow the steps below to update the Scope in your SharePoint app registration.

Resolution Steps

1. On SharePoint, navigate to: https://[sharepoint domain]/[site collection path]/_layouts/15/appinv.aspx
2. Enter the Client ID of the SharePoint app you created. This value is the consumer key of the Authentication Provider you created in Salesforce Setup.
3. Click Lookup.
4. Click Create. This does not create a new SharePoint app — it only updates the existing app's permissions.
5. In the Permission Request XML field, enter a correct Scope value from the three valid options listed in Create an Authentication Provider for SharePoint Online or OneDrive for Business Using Office 365 (Alternate Method) — specifically in the "Register an Office 365 app" section, Step 6.

Example Permission Request XML

The following is an example Permission Request XML for connecting to a single site on SharePoint Online. The Scope value must be one of the three exact values specified in the Salesforce help documentation — do not substitute your company's SharePoint domain name.
The Permission Request XML format is:
AppPermissionRequests containing an AppPermissionRequest element where Scope is set to "http://sharepoint/content/sitecollection/web" and Right is set to "Read".


 Create an Authentication Provider for SharePoint Online or OneDrive for Business Using Office 365 (Alternate Method) 
Create an Authentication Provider for SharePoint Online or OneDrive for Business