Integration with Microsoft SharePoint - GRC Policy authoring

[Kannan Nair]

Currently we are checking the feasibility of integrating ServiceNow with Microsoft SharePoint for policy authoring. As per the ServiceNow docs, for the integration the 'Microsoft OneDrive spoke 2.3.1' needs to be installed.

Link to the doc: https://docs.servicenow.com/bundle/xanadu-governance-risk-compliance/page/product/grc-policy-and-com...

Also, in the integration configuration step, to set up the Microsoft SharePoint to perform actions in Microsoft SharePoint site from ServiceNow, it is recommended to setup the Microsoft OneDrive for Document Services.

Link to the doc: https://docs.servicenow.com/bundle/washingtondc-servicenow-platform/page/product/document-services/t...

The above documentation is identical to that of the one for the Microsoft OneDrive integration. For the OneDrive integration also we have the exact same spoke(with a different version) and same step of setting up the Microsoft OneDrive for Document Services.

Hence, was wondering on why it is required to setup OneDrive spoke and configuration if the requirement is specifically for SharePoint integration. Is there any additional steps involved in the configuration of GRC SharePoint integration

 

[Community Alums]

Hi Kannan, I am also trying the same, but not able to identify the right steps. Just wanted to confirm if you had any luck with the Sharepoint integration for policy authoring. 

I even tried installing Sharepoint Online spoke, but getting following error in logs:

GRC Cloud integration: Error while creating document on provider xxxxxxxxxxxxxxxxxxxxx for record of sn_compliance_policy with sysId yyyyyyyyyyyyyyyyyyyyyyyyyyyyy
Error details: SharePoint site URL is invalid or you don't have sufficient permissions to access it.

[Connor Levien]

@Kannan Nair @Community Alums  you have to follow the initial steps in the OneDrive spoke set up steps first, which require configuration outside of ServiceNow in Azure to allow the ServiceNow instance sufficient permissions to access the content in OneDrive/Sharepoint

https://www.servicenow.com/docs/bundle/xanadu-servicenow-platform/page/product/document-services/task/configure-ms-onedrive-doc-services.html

@Community Alums the error you are getting indicates you havent given the ServiceNow instance the sufficient access to OneDrive

Then once these steps are completed, you have to do the additional config specified at the bottom of the page in 

https://www.servicenow.com/docs/bundle/xanadu-governance-risk-compliance/page/product/grc-policy-and-compliance/concept/pre-req-policy-redlining.html

Specifically the system properties at the bottom.

[Community Alums]

Hi Connor,

Really appreciate for your response! I cross checked the above links multiple times. To me it looks like something is missing in the documents.

Please find the attached API permissions which I added in the OAuth Profile:

Can you please explain little bit where the spoke is mapped with the auth Profile created as mentioned in the document and how to debug/troubleshoot the issues.

For example: using static code walkthrough of script include to me it looks like the subflows for sharepoint are mapped here:

For me, in script include GRCOnedriveV2ConnectorBase:

siteOutputStream is coming empty. I tried looking for action with Internal name: 

'look_up_sites_based_on_query_string_stream'

The output is as follows: so i do not see any error in response headers.

[Tom_T]

I still try to find out, why the ServiceNow requires full rights to practically all onedrives. When I asked for settting this up, I got informed that this is a full rights grab and we will not provide accounts with such extensive rights. Is there a different option to provide access to sepcific Onedrive or specific SharePoints only instead of all?