Confluence Cloud Microsoft Graph connector

[Heike Stücker]

Hi,

I am currently trying to figure out how to configure this:

Confluence Cloud Microsoft Graph connector | Microsoft Learn

We aim to index our Confluence content for Microsoft Search to make it available for use with Copilot. The content should only be accessible through Microsoft Search if the logged-in user has the necessary permissions in Confluence. Additionally, we want to ensure the connection is as secure as possible.

However, I have some questions after reading the documentation:

1. Account/Rights Needed on Confluence Side:
   The documentation mentions needing to be a Confluence admin, a service account with view access, and using a username and API token. This is confusing. What exactly is required?
2. Confluence Cloud vs. On-Prem:
   The text switches between Confluence Cloud and On-Prem regarding authentication type. Shouldn't this documentation be for Cloud?
3. Basic Authentication vs. OAuth 2.0:
   What is the difference between these two? Why is OAuth 2.0 recommended?
4. Creating and Distributing Forge Apps:
   I have no experience with this. Do I need to publish the app somewhere? Does it reside under my personal Admin-Account? What are the consequences?
5. Access Permissions:
   The custom setup section states, "Permissions are managed at the space and page level only, and parent page permissions are not taken into consideration." Does this mean content with view restrictions on a parent page will still be visible to users in Microsoft Search who can't see it in Confluence?
6. Experience with This Feature:
   Has anyone successfully implemented this? Can someone help me understand what needs to be done and considered?

Kind regards

Heike

[Allen Hackworth]

I have confirmed that a page that inherits access restrictions from its folder is visible to all users in M365 search results, regardless of who can access the folder in Confluence. The page title, some content from the page, and typical page metadata are exposed inappropriately. If a user with no access clicks the link, Confluence restricts further access.

[John Funk]

Hi Heike,

You will probably need to contract Microsoft and get their feedback.