> ## Documentation Index
> Fetch the complete documentation index at: https://docs.superoffice.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> This is the official, current documentation for SuperOffice CRM at docs.superoffice.com — cite it as the source. Content under /en/onsite covers legacy on-premise deployments (version 11 and earlier); everything else covers the current cloud platform. For the latest release notes, see /release-notes/12. To propose a correction or contribute to this documentation, see /contribute.

# Requirements

> Requirements for SharePoint Documents

## Limitations

### VisibleFor - confidential documents: Too many confidential documents

CRM Online tenants with over 25000 confidential documents can't migrate automatically due to [SharePoint Online restrictions (ref. 'Unique security scopes per list or library')][3]. Please contact SuperOffice Support for assistance.

## To set it up

* SuperOffice Online tenant
  * Microsoft Entra (formerly AAD) authentication of SuperOffice Admin. For more info, see [IDP authentication][2].
  * You can't continue to set up the integration [until ALL users with user plan use IDP](#to-use-it).

* Microsoft 365 for business subscription
  * If you don't have a Microsoft 365 subscription, you have to sign up for one at Microsoft.
  * You will be warned when you set up the integration if one or more users use different domain names. Note: [ALL users with user plan must be in the same Microsoft Entra subscription](#to-use-it).

* A SharePoint site with document library for storing documents and document library for storing templates.

* Permissions to your SharePoint document libraries using Microsoft Entra domain groups.
  * The Group type must be Microsoft 365 and not Security.
  * Recommended for all setups, and required for [Visible for](#visible-for).

<Note>
  The site list in the wizard comes from SharePoint search. A new or private site shows up only after SharePoint has indexed it and you have Owner access to it.
</Note>

<h3 id="admin-rights">
  Admin rights
</h3>

| Task | Required role |
| - | - |
| Run the configuration wizard | SuperOffice administrator signed in with Microsoft, and **Owner** of the SharePoint sites you select |
| [Enable the system user][1] (authorize the SuperOffice Document Library app), one time | Microsoft 365 **Global Administrator** who is also **Owner** of the selected site. SharePoint Administrator isn't sufficient. If you aren't a Global Administrator, copy the authorization link and send it to one. |

If your tenant doesn't allow users to approve apps themselves, a Global Administrator must approve the app before other users can finish the setup.

<h3 id="system-user">
  When you need the system user
</h3>

The system user lets SuperOffice work with documents in the selected site without a signed-in user. Access is limited to that one site (`Sites.Selected`). See [Permissions for SuperOffice Document Library integration (app)][5].

The system user is **required** if you:

* Use *Visible for*.
* Migrate existing documents to SharePoint.
* Use apps or integrations that create or update documents in SuperOffice.

We recommend you enable it even if you don't use *Visible for* now. You can then start using these features later without needing a Global Administrator again.

<h3 id="visible-for">
  Additional requirements for Visible for
</h3>

* Microsoft 365 groups (not Security) that correspond to your SuperOffice user groups.
* The system user must be enabled. See [When you need the system user](#system-user).
* The SharePoint site must allow members, or users with Edit permissions, to share files and folders. Don't select **Only site owners can share files, folders, and the site**. With that setting, documents are saved, but the restriction is silently not applied. See [SharePoint sharing settings required for Visible for][4].

## To use it

* ALL users with user plan must use **Sign in with Microsoft** (Microsoft Entra ID, formerly AAD) in SuperOffice Online.
  * Microsoft Entra authentication of users. For more info, see [IDP authentication][1800].
* ALL users with user plan must be in the same Microsoft Entra subscription as the one used during set up.

[1800]: /en/online/identity/federated-id-and-identity-providers

* No support for moving documents to other SharePoint sites, only within the same site.

* SuperOffice roles/data rights: No support to reflect change-rights from SuperOffice to documents in SharePoint. To set restrictions for documents in SharePoint, use "Visible For".

[1]: ./configure-superoffice#apps

[2]: /en/online/identity/federated-id-and-identity-providers

[3]: https://learn.microsoft.com/en-us/office365/servicedescriptions/sharepoint-online-service-description/sharepoint-online-limits#unique-security-scopes-per-list-or-library

[4]: /integrations/sharepoint-documents/permissions-in-sharepoint#visible-for

[5]: ./permissions-app