Microsoft 365
Edit in the Office you already pay for
Docplume connects to your own Microsoft 365 tenant through an app registration restricted to a single SharePoint site. Your team edits in Word, Excel and PowerPoint; Docplume stays the master copy.
How the bridge works
When someone clicks “Edit in Office”, Docplume copies the document to your chosen SharePoint site for the length of the editing session, opens it in Office for the web or desktop Office, watches for changes, pulls the result back as a new Docplume version, and removes the temporary copy. Nothing else on SharePoint is ever touched.
What Sites.Selected can and cannot see
The app registration is granted the Microsoft Graph permission Sites.Selected with the write role on exactly one site — the least privilege the bridge needs, and the one an IT admin can comfortably consent to.
What it can do
- Upload, download and update files on the one SharePoint site you choose.
- Read the metadata it needs to detect a change (eTag, cTag, last-modified).
- Check files out and back in, and delete the temporary session copy it placed there.
What it can never do
- Reach any other site, library, mailbox or user in your Microsoft 365 tenant.
- Mint sharing links — people open files with their own Office sign-in, so they must be members of the site.
- See or change anything outside the single site’s drives.
The setup, in seven steps
One-time, about ten minutes, no coding — done by someone who can manage your Microsoft 365. The full click-by-click guide, with the exact values to paste, is in the app.
-
1
Register an app
In the Azure Portal, create an App registration and copy its Application (client) ID and Directory (tenant) ID.
-
2
Create a client secret
Add a client secret and copy its Value straightaway — it is shown only once.
-
3
Add the Sites.Selected permission
Add the Microsoft Graph application permission Sites.Selected and grant admin consent.
-
4
Find your SharePoint site
In Graph Explorer, look up the site you want Docplume to use and copy its site ID.
-
5
Grant the app write on that site only
Post a permission that gives your app the write role on that one site — this is the step that locks everything down.
-
6
List the site’s libraries
List the site’s document libraries so you can pick the one files are placed in while being edited.
-
7
Copy the Drive ID
Copy the id of the library you picked into Docplume, alongside the tenant, client and secret. You are connected.
Everyone who should edit must be a member of that SharePoint site — Docplume opens files through SharePoint, so Microsoft checks each person’s access. People who are not members get a read-only view.
Send me the IT-admin setup guide
A step-by-step PDF for your IT admin: registering the app, consenting to Sites.Selected, and locking Docplume to a single SharePoint site. We’ll email it to you.
Prefer to work offline? Use desktop check-out
When you need exclusive, offline editing, check a document out to Docplume Desktop instead: it locks the document, downloads it to your machine, and uploads a new version each time you save, until you check it back in — no SharePoint round-trip at all.