Microsoft Graph connector tools

Optimizely Opal's Microsoft Graph connector tools let you manage your Microsoft 365 calendar and file ecosystem directly within the Opal platform. These tools streamline meeting scheduling, calendar management, and file browsing across OneDrive and SharePoint, including robust capabilities for going through document libraries, retrieving site pages, and organizing drives. The tools integrate with Microsoft 365 to keep your workflow connected and efficient without needing to switch between Opal and the Microsoft 365 admin panel or individual apps like Outlook, Teams, or SharePoint.

Key Capabilities

User and directory management

• User profiles – Access and retrieve user information from Azure Active Directory.
• Directory operations – Browse organizational structure and user relationships.
• Tenant information – Get details about the Microsoft 365 organization.

File and drive operations

• OneDrive access – Navigate and manage files in OneDrive for Business.
• SharePoint integration – Access SharePoint sites and document libraries.
• Drive management – List and access organizational drives.
• File operations – Read, write, and manipulate files across Microsoft cloud storage.

Communication and collaboration

• SharePoint sites – Access collaborative workspaces and content.

Security and compliance

• Azure AD authentication – Secure authentication through Microsoft identity platform.
• Token management – Automatic token refresh and session management.
• Permission scoping – Granular control over API access permissions.
• Audit logging – Comprehensive logging of API operations and access.

Get started

First, an Opal administrator must connect Opal with Microsoft Graph using Optimizely Connect Platform (OCP). Microsoft Graph uses system-level OAuth by default. After installing the connector in OCP and adding the tools to Opal, users and agent builders can optionally log in to Microsoft Sharepoint, OneDrive, and Outlook Calendar to access their personal Microsoft information from within Opal. Administrators only need to install the Microsoft Graph connection in OCP once.

Prerequisites

• Microsoft 365 – Active subscription with appropriate licenses.
• Azure AD – Application registration with Microsoft Graph permissions.
• Network access – Outbound HTTPS access to Microsoft Graph endpoints.

Connect Opal with Microsoft Graph

Install Microsoft 365 Opal Tool in OCP

In the OCP App Directory, complete the following:

1. Click the Microsoft 365 Opal Tool connector tool.
2. Click Install App.
3. Log in to Microsoft.

Enable instance-level Opal OAuth (Optional)

Microsoft Graph uses system-level OAuth by default. If your organization requires instance-level OAuth, complete the following steps:

1. Go to the Settings tab.
2. Expand the Microsoft 365 Settings.
3. Toggle Instance level Opal OAuth on and enter your Microsoft 365 Connection Name. 

4. Click Save. 

   

Add to Opal

1. Go to the Settings tab.
2. Expand the Add to Opal section.

3. Click Add to Opal to register the Microsoft Graph connector tools to the corresponding Opal instance.

   

After you complete the previous steps, Opal users can then follow the steps in the User-level auth for Microsoft section to login with their personal information if you enabled instance-level Opal OAuth.

User-level auth for Microsoft

After an administrator connects Opal with Microsoft Graph, you can log in from Opal to access your information if they enabled instance-level Opal OAuth. User-level authorization ensures individual Opal users and agent builders can only access data they have permission to access within Microsoft.

To authenticate, complete the following steps in Opal:

1. Go to Tools > Connectors.

2. Click Connect for the Microsoft Onedrive & Sharepoint

   

   or Microsoft Outlook Calendar tools.

   

3. Log in to Microsoft.
4. Grant the requested permissions.

Microsoft Graph connector tools

After an administrator Installs Microsoft graph in OCP and you log in to Microsoft using User-level auth for Microsoft, you can call the following tools in Opal. Click a tool's name to expand it and learn when to use the tool, required and optional parameters, and example prompts on how to call the tool. If you do not provide a required parameter, Opal prompts you for it.

Microsoft Outlook Calendar

Microsoft OneDrive and Sharepoint

Sharepoint

Architecture

Authentication and Security

• Microsoft Azure AD – Secure authentication through Azure Active Directory.
• MSAL integration – Microsoft Authentication Library for token management.
• OAuth 2.0 – Industry-standard authentication and authorization.
• Device code flow – Secure authentication without password storage.

API Integration

• Microsoft Graph API – Unified endpoint for Microsoft 365 services.
• REST API – Standard HTTP-based API communication.
• Batch operations – Efficient bulk operations for improved performance.
• Real-time updates – Support for webhooks and change notifications.

Supported Microsoft 365 services

Core services

• Azure Active Directory – Identity and access management.
• OneDrive for Business – Cloud file storage and sync.
• SharePoint Online – Collaboration and document management.

Data types

• User profiles – Personal and organizational information.
• Files and folders – Documents, images, and media files.
• SharePoint lists – Structured data and custom content types.

API permissions

Application permissions (app-only access)

• Files.ReadWrite.All – Access and write all files.
• Sites.ReadWrite.Al: – Access and write all SharePoint sites.
• Calendars.ReadWrite – Access and write to all Calendars (not recommended).

Delegated permissions (user context)

• Files.ReadWrite – Access user's files.
• Sites.ReadWrite.All – Access SharePoint sites.
• Calendars.Read – Access to your Calendar.
• Calendars.Read.Shared – Access to your Calendar and shared Calendars.
• Calendars.ReadWrite – Access and write to your Calendar.
• Calendars.ReadWrite.Shared – Access and write to your Calendar and share Calendars.