Read SharePoint sites, files, and workbooks, then make changes you approve first
Connect SharePoint Graph and your agent can look across sites, document libraries, list items, and file versions without waiting on someone to dig out a link. It reads sharing permissions, sensitivity labels, and document comments for context, then handles the change itself — adding a worksheet, appending table rows, copying a content type into a list — as a step you approve before it runs. Authentication is OAuth2.
WriteExecute Microsoft Graph BatchExecute a Microsoft Graph JSON batch request. Approval by default
WriteFollow SharePoint SitesFollow one or more SharePoint sites for a user. Approval by default
WriteGrant SharePoint Share PermissionGrant users access to a shared SharePoint or OneDrive link via an encoded sharing URL. Approval by default
WriteInvite Users To SharePoint Drive ItemInvite recipients to a SharePoint drive item. Approval by default
WriteMove SharePoint Drive ItemMove a SharePoint drive item by updating its parentReference. Approval by default
WritePublish SharePoint Content TypePublish a SharePoint content type from the content type hub site. Approval by default
WritePublish SharePoint Site PagePublish a SharePoint site page. Approval by default
WriteReauthorize Microsoft Graph SubscriptionReauthorize a Microsoft Graph webhook subscription. Approval by default
WriteRestore SharePoint Drive Item VersionRestore a previous version of a SharePoint drive item. Approval by default
WriteRestore SharePoint List Item VersionRestore a previous version of a SharePoint list item. Approval by default
WriteUnfollow SharePoint SitesUnfollow one or more SharePoint sites for a user. Approval by default
WriteUnpublish SharePoint Content TypeUnpublish a SharePoint content type from the content type hub site. Approval by default
WriteUpdate SharePoint Drive ItemUpdate drive item metadata such as name or description. Approval by default
WriteUpdate SharePoint Drive Item PermissionUpdate the roles of a direct sharing permission on a SharePoint drive item. Approval by default
WriteUpdate SharePoint ListUpdate SharePoint list metadata. Approval by default
WriteUpdate SharePoint List ColumnUpdate a SharePoint list column definition. Approval by default
WriteUpdate SharePoint List Content TypeUpdate a SharePoint list content type. Approval by default
WriteUpdate SharePoint List ItemUpdate a SharePoint list item. Approval by default
WriteUpdate SharePoint List Item FieldsUpdate field values for a SharePoint list item. Approval by default
WriteUpdate SharePoint SiteUpdate editable SharePoint site metadata (description). Approval by default
WriteUpdate SharePoint Site ColumnUpdate a SharePoint site column definition. Approval by default
WriteUpdate SharePoint Site Content TypeUpdate a SharePoint site content type. Approval by default
WriteUpdate SharePoint Site PageUpdate editable metadata and layout for a SharePoint site page. Approval by default
WriteUpdate SharePoint Site Page Web PartUpdate the properties of a web part on a SharePoint site page. Approval by default
WriteUpdate SharePoint Site PermissionUpdate the roles of an application (Sites.Selected) permission on a SharePoint site. Approval by default
WriteUpdate Microsoft Graph SubscriptionUpdate a Microsoft Graph webhook subscription. Approval by default
WriteUpdate SharePoint Workbook TableUpdate properties of a table in an Excel workbook stored in SharePoint. Approval by default
WriteUpdate SharePoint Workbook WorksheetUpdate worksheet metadata in an Excel workbook stored in SharePoint. Approval by default
WriteUpload Bytes To SharePoint Upload SessionUpload one byte range (chunk) of a file to an existing SharePoint upload session, or get the session status or cancel it. Approval by default
WriteUpload SharePoint FileUpload a file of any size to SharePoint via a chunked Microsoft Graph upload session, creating the destination folder path if needed. Approval by default
WriteCalculate SharePoint WorkbookRecalculate an Excel workbook stored in SharePoint. Approval by default
WriteClear SharePoint Workbook RangeClear the contents and/or formatting of a range in a SharePoint Excel workbook. Approval by default
WriteDelete SharePoint Workbook RangeDelete a range from a SharePoint Excel workbook and shift the remaining cells. Approval by default
WriteInsert SharePoint Workbook RangeInsert a cell or range in an Excel workbook stored in SharePoint, shifting existing cells. Approval by default
WriteMerge SharePoint Workbook RangeMerge the cells of a range in a SharePoint Excel workbook into a single cell. Approval by default
WriteSort SharePoint Workbook RangeSort a cell range in an Excel workbook stored in SharePoint. Approval by default
WriteUnmerge SharePoint Workbook RangeUnmerge previously merged cells of a range in a SharePoint Excel workbook. Approval by default
WriteUpdate SharePoint Workbook RangeUpdate a cell or range in an Excel workbook stored in SharePoint. Approval by default
WriteUpdate SharePoint Workbook Range FillUpdate the fill of a cell or range in an Excel workbook stored in SharePoint. Approval by default
WriteUpdate SharePoint Workbook Range FontUpdate the font of a cell or range in an Excel workbook stored in SharePoint. Approval by default
WriteUpdate SharePoint Workbook Range FormatUpdate the format of a cell or range in an Excel workbook stored in SharePoint. Approval by default
One prompt, start to finish
What a governed SharePoint Graph run looks like inside Luumen.
Questions
How does LuumenAI connect to SharePoint Graph?
Authorize once with OAuth 2.0. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Can LuumenAI change things in SharePoint Graph on its own?
Read actions answer immediately. Anything that writes — add column to sharepoint content type, add content type copy from hub, add content type copy to sharepoint list, add sharepoint workbook chart, and more — is shown as a plan and requires approval by default, including the 19 actions classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
Who gets access to the integration?
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Is there an audit trail?
Every call to SharePoint Graph — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.