# Microsoft 365 Onboarding

This guide walks through connecting your Microsoft 365 tenant to Rockhopper. The process has three steps and takes about 15 minutes.

## Step 1: Approve the Azure app permissions

Construct the admin consent URL by replacing `tenant-id` with your actual tenant ID (see [Prerequisites](/it-setup/prerequisites.md)):

```
https://login.microsoftonline.com/tenant-id/v2.0/adminconsent?client_id=4fea1907-8080-44e1-8b4f-c6ce31563ac9&redirect_uri=https%3A%2F%2Fapp.rockhopper.co&scope=https://graph.microsoft.com/Files.Read.All%20https://graph.microsoft.com/Files.ReadWrite.All%20https://graph.microsoft.com/User.ReadBasic.All
```

1. Open the URL in your browser
2. Sign in with your admin account
3. Review the listed permissions and click **Accept**

![Azure admin consent screen showing the permissions Rockhopper requests](/files/IIDWbL2FC4oFfGiqltAD)

4. You'll be redirected to the Rockhopper homepage

{% hint style="info" %}
For details on what each permission does, see [Microsoft Permissions](/security-and-compliance/microsoft-permissions.md).
{% endhint %}

## Step 2: Sign into Rockhopper with admin consent

1. Go to [app.rockhopper.co](https://app.rockhopper.co) and click **Sign in with Microsoft**

![Rockhopper sign-in page](/files/ERxRIlcGKkUIRrRxeqQU)

2. On the permissions screen, check **Consent on behalf of your organization**
3. Click **Accept**

![Microsoft permissions screen with the "Consent on behalf of your organization" checkbox checked](/files/XlwEjOm9RneltDhAyoEB)

4. You'll be directed to an invite code screen — skip this for now

## Step 3: Grant server-side API permissions

This grants the backend API permissions that Rockhopper needs for background processing (like downloading files for version snapshots):

1. Go to [portal.azure.com](https://portal.azure.com)
2. Click **Manage Microsoft Entra ID** > **Manage**
3. Click **Enterprise Applications**
4. Find and select **Rockhopper Inc.**
5. Click **Security** > **Permissions**
6. Click **Grant admin consent for Rockhopper Inc.**

![Rockhopper Inc. permissions page in Azure Enterprise Applications](/files/IIAwX2E0Ad4saOuR88ro)

7. Review and accept the permissions in the consent modal

![Azure consent modal showing the full list of permissions requested](/files/czuSLZhOZnb6pAZrWjf8)

## Done

Your Microsoft 365 tenant is now connected to Rockhopper. Visit [app.rockhopper.co](https://app.rockhopper.co), enter your invite code, and start enrolling files and inviting team members.

**Next step:** [Deploy the Excel Add-in](/it-setup/excel-addin-deployment.md) to your users.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.rockhopper.co/it-setup/tenant-onboarding.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.