SharePoint Developer topics

Navigating SharePoint App Permissions After Azure ACS Retirement

aryan003 — Sat, 18 Apr 2026 06:32:01 GMT

With the retirement of Azure ACS (Access Control Services), the familiar SharePoint page (_layouts/15/appprincipals.aspx) used to view and manage app permissions is no longer available. Previously, developers could quickly inspect and revoke app permissions directly from this interface. Now, permission management has shifted to more modern approaches using Azure AD app registrations and SharePoint Online PowerShell. To review and remove permissions, developers should leverage tools like the Microsoft Graph API, Azure Portal (for Enterprise Applications and App Registrations), or SharePoint Online Management Shell (Get-SPOSite, Get-SPOAppPrincipal, and related cmdlets). This transition encourages better alignment with current security practices, centralized identity management, and improved governance across Microsoft 365 environments.

SPFx CDN URLs not consistently added to Trusted Script Sources (CSP)

rishiupatil — Wed, 01 Apr 2026 07:38:56 GMT

Hi everyone,

We’re currently investigating an issue related to SharePoint Online Content Security Policy (CSP) and Trusted Script Sources (TSS) for SPFx solutions.

[SharePoint Online] [SPFx] [CSP]

Scenario

We deployed multiple SPFx .sppkg packages via App Catalog
These solutions load scripts from an external CDN (cdnBasePath, with includeClientSideAssets: false)

Expected Behavior

As per documentation, CDN URLs used by SPFx solutions should be available/registered in Trusted Script Sources so that scripts can load under CSP enforcement

Observed Behavior

Only some CDN URLs (from certain packages) appear in Trusted Script Sources
Others are missing, even though they are similarly configured and deployed
Due to this, scripts from those missing sources are blocked by CSP, and the extension fails to load

Additional Notes

No use of eval() or inline scripts in our code
Re-deploying packages sometimes resolves the issue (CDN URLs get registered afterward)
Behavior appears inconsistent across environments

Question
Has anyone encountered a similar issue where:

Trusted Script Sources were partially auto-populated from App Catalog deployments?
CDN URLs from some SPFx packages were not registered automatically?

Any insights on:

Root cause
Known limitations
Best practices to ensure consistent registration

would be really helpful.

Thanks in advance!

SharePoint ACS Retirement – Guidance Needed for Migration to Azure AD / Graph or Better if Available

aryan003 — Fri, 27 Mar 2026 10:15:14 GMT

We have an integration between Microsoft Dynamics 365 Business Central (AL) and SharePoint Online for uploading and accessing files in document libraries.

Current Implementation

App Registration & Permissions

App created using:
/_layouts/15/appregnew.aspx
Permissions granted via:
/_layouts/15/appinv.aspx → “Trust It”

Current permission (overly broad):

Authentication (ACS Token)

We generate access tokens using:

POST https://accounts.accesscontrol.windows.net/{tenant-id}/tokens/OAuth/2

SharePoint API Usage

We are using SharePoint REST API:

Upload file:

POST https://<org>.sharepoint.com/sites/<site>/_api/web/GetFolderByServerRelativeUrl('/sites/<site>/Shared Documents')/Files/add(url='file.pdf',overwrite=true)

Download / read files:

GET https://<org>.sharepoint.com/sites/<site>/_api/web/GetFileByServerRelativeUrl('/sites/<site>/Shared Documents')/Files...

Questions

After April 2026, will existing ACS-based integrations completely stop working, or only new registrations will be blocked?
What is the recommended modern approach for this scenario:
- Continue using SharePoint REST API with Azure AD token
- OR migrate fully to Microsoft Graph API
If we switch to Azure AD authentication:
- Can we continue using existing _api/web/... endpoints?
- Or is Graph API mandatory?
What is the best way to restrict access to a single SharePoint site (avoid tenant-wide permissions like FullControl)?
For Business Central (AL), is there any recommended approach or pattern for:
- Generating Azure AD tokens (client credentials flow)
- Calling SharePoint / Graph APIs securely

Any guidance, best practices, or migration examples would be highly appreciated.

If possible pls share some Blogs or resource when this overall new process is explain so that i can can a hit and start the development.

Post SPFX webpart deployment - JS conflictings

AkhileshRao — Fri, 13 Mar 2026 09:54:50 GMT

Hi,

I am working on the Classic SharePoint Online project. I need to migrate the Provider hosted apps to SPFX. Most of the functionality has been implemented using HTML and Javascript. Using Javascript Provided hosted app methods are being called directly on SharePoint Page. Huge client side scripts are written.

I have migrated all the provider hosted apps code to Asp.net web api and deployed in Azure. I have configured Azure AD authentication on top. I am using SPFX webpart which is consuming the APIs and returning the values. SPFX methods are exposed to be accessible via external js.

I deployed the SPX app in Sharepoint classic pages. Some Page it is working fine. On some webpart it experiencing error :

Something went wrong

If the problem persists, contact the site administrator and give them the information in Technical Details.

Technical Details

I checked in browser console seeing error :

Error: Mismatched anonymous define() module: function(){return A} https://requirejs.org/docs/errors…, stage: 'Load'}

requireModules: undefined

requireType: "mismatch"

message: "Mismatched anonymous define() module: function(){return A}\nhttps://requirejs.org/docs/errors.html#mismatch"

stack: "Error: Mismatched anonymous define() module: function(){return A}\nhttps://requirejs.org/docs/errors.html#mismatch\n at makeError (eval at e

[[Prototype]]: Object

error: Error: Mismatched anonymous define() module: function(){return A} https://requirejs.org/docs/errors.html#mismatch at makeError (eval at e

stage: "Load"

[[Prototype]]: Object

How can i fix it? Please help.

Thanks in advance.

Central News Help

Welch — Wed, 18 Feb 2026 18:44:03 GMT

Hello everyone,

I’m looking for guidance on using SharePoint to distribute department updates across multiple locations, with an administrator controlling who sees each update.

Our organization uses a dedicated Microsoft Team for each location (27 total). A single update may need to be shared with one location, several locations, or all 27. Conceptually, I have a solid understanding of how this should work, but I’ve run into some practical roadblocks, and Copilot hasn’t quite gotten me where I need to be.

Here’s the workflow I’m envisioning:

A Department Head submits an update via a Microsoft Form.
The form responses are stored in a SharePoint List on a central “News Hub” site.
An Admin reviews the submission, makes edits if necessary, selects one or more target locations, and publishes the update.
Each update includes a publish date and an expiration date, since these updates are used for monthly meetings at each location.

Based on the selected target locations, the update would either:

Display on a SharePoint site associated with the corresponding Team(s), or
Remain on a centralized News Hub as an additional page that can be embedded on a TEAM channel.

The page itself would contain both static content and dynamic monthly updates. The updates should be visible as text only (not clickable), as I want managers to see the information without navigating away from the page.

The final output would be embedded into a Teams channel, allowing each location’s manager to see only the updates targeted to their specific office.

From my understanding, this aligns with a “hub-and-spoke” news model, using:

Microsoft Forms
SharePoint Lists
Power Automate (triggered when a list item is modified)
Logic to route or display updates to the appropriate locations

I’d prefer to avoid building a Power App if possible, but I’m open to it if that’s the only viable solution.

Also, I have complete rights to the Central News Hub and the Sharepoint and Team site that I am testing on.

Any advice, best practices, or examples of similar implementations would be greatly appreciated.

Thank you in advance.

Visualizing SharePoint List Relationships as ER Diagrams

reire — Mon, 16 Feb 2026 14:08:02 GMT

In several SharePoint-based projects, I encountered the same challenge. As solutions grow, list relationships become increasingly difficult to understand.

This is especially true in environments with multiple lookup columns, implicit relational structures, and long-lived tenant environments where schemas evolve over time.

Although SharePoint provides rich metadata, there is no built-in way to visualize list relationships as an ER diagram.

To explore this problem, I built a small browser extension that extracts list and column metadata from a SharePoint site, detects lookup relationships, and generates PlantUML-based ER diagram code. It can also export structured definitions to Excel.

The goal is not only diagram generation, but improving architectural visibility, impact analysis during schema changes, documentation quality in long-term projects, and migration planning such as moving SharePoint lists to Dataverse.

I am particularly interested in how other developers document SharePoint list structures in larger environments.

The extension itself is available here:
https://chromewebstore.google.com/detail/sharepoint-erd-generator/nbjfcilmndpofckndmcadgfcacadgeak

I would appreciate any feedback or discussion around approaches to SharePoint schema documentation.

Viva Learning – SharePoint content provider configured but content not appearing in Teams

rosamartinamilazzo25 — Thu, 29 Jan 2026 14:08:22 GMT

Hi everyone,

I’m configuring Viva Learning in Microsoft Teams and I’m trying to use SharePoint as a content provider to publish custom learning content (Word, PowerPoint, Excel, PDF, audio, video, and web links).

What I’ve done so far:

Created a dedicated SharePoint site.
Waited about one hour before adding it as a SharePoint provider in Viva Learning.
After the configuration, the “Learning App Content Repository” list was automatically created.
In the document library, I uploaded:
- PDF files
- a web link
I copied the folder URLs and added them to the Learning App Content Repository list.
I also followed the official procedure to create and assign a Microsoft 365 Group, as described in this documentation:
https://learn.microsoft.com/en-us/viva/learning/sharepoint-permissions

The issue:

Almost 24 hours have passed, but I still don’t see any content in Viva Learning (Teams).
In the sync logs, I can see that synchronization jobs are running, but the content is either not appearing or only partially synchronized.

At this point, I’m not sure:

if I’m missing something in the SharePoint provider configuration,
if the folder URLs are incorrect,
or if there’s some additional requirement related to permissions or metadata.

Has anyone experienced a similar issue or can suggest what I should check next?

Thanks in advance!

Group Calendar Web Part Pop Up Color

ShawnHopper — Fri, 19 Dec 2025 16:56:16 GMT

We have created a branding theme for modern sharepoint sites to match corporate colors. When clinking on a Group Calendar event, the pop up now applies a background color we didn't have in the theme as primary or secondary. Just seems to be auto selected by SP. It's too dark to read the text. I've found the Them in the classic _catalog Theme Gallery and can pull the theme into NotePad to read it but can't seem to tell which variable controls the background of pop ups. Just need it to be white (ffffff). Anyone have a solution?

{"name":"(Company Theme Name)","isInverted":false,"palette":{"themeDarker":"#243360","themePrimary":"#17244C","themeSecondary":"#5e6d9b","themeTertiary":"#7885af","themeLight":"#94a0c2","themeLighter":"#b3bcd6","themeLighterAlt":"#d6dbea","black":"#000000","neutralDark":"#201f1e","neutralPrimary":"#323130","neutralPrimaryAlt":"#3b3a39","neutralSecondary":"#605e5c","neutralTertiary":"#a19f9d","neutralTertiaryAlt":"#c8c8c8","neutralLight":"#eaeaea","neutralLighter":"#f4f4f4","neutralLighterAlt":"#f8f8f8","white":"#ffffff","neutralQuaternaryAlt":"#dadada","neutralQuaternary":"#d0d0d0"},"displayMode":"light","secondaryColors":{"light":[{"themePrimary":"#ffffff","backgroundColor":"#17244C"},{"themePrimary":"#6BC289"},{"themePrimary":"#ffffff","backgroundColor":"#6BC289"},{"themePrimary":"#26A9E1"},{"themePrimary":"#ffffff","backgroundColor":"#26A9E1"},{"themePrimary":"#1B75BC"},{"themePrimary":"#ffffff","backgroundColor":"#1B75BC"},{"themePrimary":"#E7EBF6"},{"themePrimary":"#ffffff","backgroundColor":"#E7EBF6"},{"themePrimary":"#ACBFE3"},{"themePrimary":"#ffffff","backgroundColor":"#ACBFE3"},{"themePrimary":"#B6BBBF"},{"themePrimary":"#ffffff","backgroundColor":"#B6BBBF"}],"dark":[]}}

Size increase of .sppkg packages with heft/v1.22

Jason_Cole — Thu, 18 Dec 2025 21:14:46 GMT

After upgrading our solution to SPFx 1.22.rc-0 and switching to the new heft build toolchain our .sppkg packages have suddenly grown massively in size. They are more than double the size of the 1.21 version. Is there a reason for this? Is there anything we can do to reduce the package size back to what it was previously?

Our main solution contains both web parts and list extensions, split into several bundles. Let me know what other details would be helpful.

Is Creating Multiple ClientContext Instances Efficient in CSOM for one Site Url?

Dinesh_admin — Wed, 17 Dec 2025 09:36:15 GMT

Is it efficient to create a new ClientContext for each site URL and for each query, such as getting site users, lists, groups, and group members from the Web object? These queries can return a very large number of items, and CSOM does not support paging when retrieving data from Web properties. Because of this, there is a risk of memory issues.

In this case, is creating multiple ClientContext objects a good approach? Also, how does ClientContext work internally, and how does it handle memory and performance?

SharePoint Online SP.FieldUserValue.get_email() always returns NULL.

vlad_nvs — Mon, 15 Dec 2025 10:32:16 GMT

Since last week, SP.FieldUserValue.get_email() has been returning null for all users in Person or Group fields.
This occures when I use getItems method. For example:

var listName = "MyList"; var context = SP.ClientContext.get_current(); var web = context.get_web(); var list = web.get_lists().getByTitle(listName); var query= new SP.CamlQuery(); var items = list.getItems(query); context.load(items); context.executeQueryAsync(()=>{ var enumerator = items.getEnumerator(); while (enumerator.moveNext()) { var item = enumerator.get_current(); var fldValues = item.get_fieldValues(); console.log(fldValues["Editor"].get_email()) } });

I haven’t been able to find any information about changes related to this behavior. We’ve been using the Email property of user fields for years without any issues, and it has always worked as expected. It's documented here:
https://learn.microsoft.com/ru-ru/dotnet/api/microsoft.sharepoint.client.fielduservalue.email?view=sharepoint-csom

Does anyone know what might have changed or why this has stopped working?

any possible to extend client ID and secret for app registered in SharePoint Online

FA001062506_techmahindra_caldic — Wed, 12 Nov 2025 14:24:53 GMT

Hi Team,

is there any possible to extend client ID and secret for app registered in SharePoint Online?

right now, we are not allowed to create any new app registration from SharePoint Online, only way is from Azure AD - App registration.

how about the client ID and secret getting expired which is created earlier using SharePoint Online?

is there any way like powershell script something to extend the validity of Client ID and secret for app registered in SharePoint Online?

if yes, please share the detailed instructions and guidelines to perform.

if no, then what is the possible way for next step of actions to do?

you can reachout to me - mailto:email address removed for privacy reasons for further discussion about this issue.

Thanks for the help!

SharePoint Knowledge Agent Vs Power automate AI builder

johnjohn-Peter — Mon, 20 Oct 2025 18:48:40 GMT

If we want to classify, summarize and extract key info from documents uploaded/edited inside a SharePoint document libraries. seems we can do this using AI builder inside power automate which get triggered when add/edit a document or using the Knowledge Agent, mainly the "Organize this library" option.

can any one advice when you use each?

Show Access and Confidentiality Message to External Users in a SharePoint Document Library

Asit00 — Thu, 16 Oct 2025 05:16:59 GMT

Is it possible to display the following text inside a SharePoint document library page so that it’s visible to external users when they open the shared link?

Text to Display:

Access and Use

Access is restricted to authorized representatives and internal personnel.
Users must not share their login credentials or grant access to any third party.
Uploaded and downloaded documents must relate solely to the agreed scope of work

Disclaimer

Use of this site constitutes acceptance of these terms. Access may be suspended or restricted if security, confidentiality, or compliance risks are identified.

Goal:

I want this text to be clearly visible to external parties (for example, when they open a document library link to upload or view files).

Origin and Synchronization of User Profile Properties in SharePoint Online

rosamartinamilazzo25 — Mon, 13 Oct 2025 10:34:28 GMT

Hi everyone,

I’m trying to understand exactly where the User Profile properties in SharePoint Online come from and how (or if) they are synchronized from Microsoft Entra ID (formerly Azure AD).

I’ve extracted a complete list of the properties I see in my tenant, for example:

AboutMe
AccountName
ADGuid
Assistant
CellPhone
Country
DelveFlags
Department
Fax
FirstName
HomePhone
LastName
Manager
msOnline-ObjectId
Office
...
SPS-Responsibility
SPS-Interests
SPS-PictureExchangeSyncState
SPS-UserPrincipalName
WorkEmail
WorkPhone

I would like to understand:

Which of these come from Microsoft Entra ID,
Which are automatically synchronized to the User Profile Application (UPA),
And which are local SharePoint or Delve properties, not connected to Entra.

So far, I’ve only found this official documentation:
About user profile synchronization in SharePoint Online

However, it only lists a limited subset of properties (“The following Microsoft Entra user attributes are synced to the UPA…”), and it does not cover all the properties present in the UPA schema.

I’m looking for a more complete or up-to-date reference — or at least an official explanation as to why there isn’t a public, full mapping between Entra ID and UPA.

Does anyone know if there is an official complete list or a way to verify the actual source of each property (Entra ID, Exchange, Delve, local SharePoint, etc.)?

Thanks in advance for any clarification or useful resources!

Sharepoint SitePage

Girish_venkataramanappa — Fri, 03 Oct 2025 07:34:07 GMT

Using Graph API .

I want to access a specific Sitepage , I need to know the Sitepageid, based on /pages it will return all Page id within the Site,

Is there a way to get the Sitepage id directtly based on the Sitepage name.aspx ?

I want to detect files changes on that Sitepage and be able to downlaod the files from the sitepage ? How can we do that using Graph API

I know we can detect files changed at the drive level within a site. I am looking for Sitepage can we do the same ?what API can be used ?

Repository structure and CI/CD pipeline for SPFx WebParts

rosamartinamilazzo25 — Thu, 18 Sep 2025 12:50:07 GMT

I am currently developing SPFx WebParts for a single SharePoint site. In our development repository, I have:

A shared SPFx library

Six separate WebParts, each in its own solution, organized as follows:

library
webparts
- webpart1
- webpart2
- webpart3 ...

At the moment, on Azure DevOps, everything is managed in a single repository. To build and deploy a WebPart, I check Git for changes, build the WebPart, and then deploy it.

I am considering whether, for the CI/CD pipeline, it might be more efficient to adopt a separate repository for each WebPart, allowing independent pipelines for each solution.

In this scenario, I have two main questions:

Is it considered a best practice to separate WebParts into distinct repositories?
How should the shared SPFx library be managed in this case? I assume it would need a separate repository, but I would like guidance on the best way to integrate it with the WebParts.

Thank you for your support.

Prevent specific user from downloading and syncing documents from specific site/s?

johnjohn-Peter — Sun, 14 Sep 2025 21:43:01 GMT

inside SharePoint online can we prevent specific user from downloading and syncing documents from specific site/s?

Having issues with SPFx isolation build lately

Vijaydeep — Tue, 02 Sep 2025 02:18:08 GMT

Hello

We have a customer using an isolation version of our product and when we built a new version last week, it stopped working with below error. Unfortunately, once we install the new build, replacing with the older ones that used to work stopped working and showing the same error.

"authorize:90 Unsafe attempt to initiate navigation for frame with origin 'https://xxxx.sharepoint.com' from frame with URL 'https://login.microsoftonline.com/..........'. The frame attempting navigation of the top-level window is sandboxed, but the flag of 'allow-top-navigation' or 'allow-top-navigation-by-user-activation' is not set"

We would really appreciate how to handle these errors.

Thanks

Vijay

Error 'Cannot get value for projected field...' when users without email were set to the field

IvanTioh — Thu, 14 Aug 2025 01:36:13 GMT

SharePoint List Setup

I have a simple list with a Person field Approvers which allows multiple selections. One of the list items has a user set to the Approvers but the said user does not have email configured.

REST API used

https://xxx.sharepoint.com/sites/xxx/_api/Web/Lists(guid'xxx')/items/?$filter=ID eq xxx&$select=*,Approvers%2FEMail&$expand=Approvers

REST API response

Error

{ "odata.error": { "code": "-2146232832, Microsoft.SharePoint.SPException", "message": { "lang": "en-US", "value": "Cannot get value for projected field Approvers_x005f_EMail." } } }

Graph API used

https://graph.microsoft.com/v1.0/sites/xxx/lists/xxx/items?$filter=startswith(fields/Title, 'xxx')&$expand=fields($select=Title,Approvers)

Graph API response

Success

"Approvers": [ { "LookupId": 1, "LookupValue": "User A", "Email": "" }, { "LookupId": 2, "LookupValue": "User B", "Email": "" }, { "LookupId": 3, "LookupValue": "User C", "Email": "******@outlook.com" } ]

Question

Is there anyway we can tell the REST API to react the same way as Graph API, instead of failing, return the data as-is?