To connect Dex to SharePoint Online, grant the Entra app the Sites.Selected Graph permission, then explicitly grant it access to the specific sites it should manage.
Steps
1In the Microsoft Entra admin center, open your app registration (or reuse the M365 Base app).
2Under API permissions → Add a permission → Microsoft Graph → Application permissions, add Sites.Selected (use Sites.Read.All / Sites.ReadWrite.All only if tenant-wide access is intended).
3Click "Grant admin consent for <tenant>" and confirm the green checkmark.
4For each SharePoint site Dex should access, grant the app site-level permission — e.g. via the Graph POST /sites/{site-id}/permissions call or the PnP New-PnPSitePermission cmdlet, specifying the app's client ID and a read or write role.
5Provide Dex the Tenant ID, Client ID, and Client secret, plus the SharePoint tenant URL and the target site URLs.
Paste into Dex
The connection form in the Dex app store asks for these values:
