You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

Microsoft Search required


The Aspire Microsoft Search publisher requires internet access to publish to a Microsoft Search index

User Account Requirements 


Azure Active Directory Application registration

Register your AAD app (as multi-tenant or ask admins to register it as single tenant) and add the permission ExternalItem.ReadWrite.All. This permission requires global admin (or) application admin to consent to the use of app within their tenant. Once consented you would be able to create connections and ingest content.

Note: Microsoft uses the word connection to refer to a connector and an index within Microsoft Search.
  1. Login to Microsoft Azure with the tenant admin credential
  2. Click on 'Azure Active Directory'->'App Registrations'
  3. Create a 'New registration' & copy the application (client) id
  4. Under 'Clients & certificates' create a 'new client secret' & copy the 'client secret'
  5. Under 'API permissions' -> 'Add a permission' -> Select 'Microsoft Graph' -> Select 'Application permissions' -> search for & add 'ExternalItem.ReadWrite.All'
  6. Grant admin consent by clicking the 'Grant admin consent for <tenant>'

For detailed documentation on application registration, refer: register an app.
For details on tenancy & creating multi-tenant apps, refer: Tenancy in Azure Active Directory.
For details on pre-authorization flow & different ways to consent, refer: Consent to an application.

Windows or Linux


The Microsoft Search publisher run on either Windows or Linux.


  • No labels