Getting Started
This page walks you through everything you need to do before launching SharePoint ToolBox for the first time: installing prerequisites, registering an Azure AD application, and making your first connection.
Prerequisites
| Requirement | Minimum version | Notes |
|---|---|---|
| Windows OS | Windows 10 / Server 2016 | WinForms GUI requires Windows |
| PowerShell | 5.1 | PowerShell 7+ also supported |
| PnP.PowerShell module | Latest stable | See installation below |
| Azure AD App Registration | N/A | Delegated permissions required |
| Internet connectivity | N/A | Required for all SharePoint Online calls |
Step 1 — Install PnP.PowerShell
Open a PowerShell console as your regular user (administrator is not required) and run:
Install-Module PnP.PowerShell -Scope CurrentUser -Force
To verify the installation:
Get-Module PnP.PowerShell -ListAvailable | Select-Object Name, Version
⚠️ Note: If you are behind a corporate proxy, you may need to configure[System.Net.WebRequest]::DefaultWebProxy.Credentials = [System.Net.CredentialCache]::DefaultCredentialsbefore runningInstall-Module.
Step 2 — Register an Azure AD Application
SharePoint ToolBox authenticates using delegated permissions via an interactive browser login. You must create an App Registration in your Azure Active Directory tenant.
2.1 Create the App Registration
- Open the Azure Portal and navigate to Azure Active Directory > App registrations.
- Click New registration.
- Enter a name, for example
SharePoint ToolBox. - Under Supported account types, select Accounts in this organizational directory only.
- Under Redirect URI, choose Public client/native (mobile & desktop) and enter:
http://localhost - Click Register.
- Copy the Application (client) ID — you will paste this into the Client ID field in the app.
2.2 Grant API Permissions
- In your new App Registration, go to API permissions > Add a permission.
- Choose SharePoint > Delegated permissions.
- Add the following permissions:
| Permission | Purpose |
|---|---|
AllSites.Read | Read site contents, lists, and libraries |
AllSites.FullControl | Required for permissions audit and template creation |
User.Read | Read the signed-in user's profile |
- Click Grant admin consent (requires a Global Administrator or Privileged Role Administrator).
⚠️ Note: AllSites.FullControl is a high-privilege permission. Restrict access to the App Registration to trusted administrators only. Consider using Azure AD Conditional Access policies to limit who can authenticate with this application.
2.3 Enable Public Client Flows
- Go to Authentication in your App Registration.
- Under Advanced settings, set Allow public client flows to Yes.
- Save.
Step 3 — Launch the Application
# Navigate to the application folder
Set-Location "C:\Tools\SharepointToolBox"
# Launch the GUI
.\SharepointToolBox.ps1
The WinForms window will open. If PowerShell's execution policy blocks the script, run:
Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy RemoteSigned
Step 4 — First Connection
- Enter your Tenant URL (e.g.
https://contoso.sharepoint.com). - Enter the Client ID you copied in Step 2.1.
- Enter a Site URL or use the Browse button to pick sites.
- Click Connect. A browser window opens for interactive authentication.
- Sign in with an account that has the required permissions on the target site(s).
Troubleshooting
| Symptom | Likely cause | Fix |
|---|---|---|
Install-Module fails | PowerShell Gallery unreachable | Check proxy / firewall settings |
| Browser does not open on connect | No default browser set | Set a default browser in Windows settings |
| "Access denied" on site | Insufficient permissions | Verify admin consent was granted |
| Module not found at runtime | Installed for a different user scope | Re-run Install-Module for current user |
See Also
- Home — Overview and feature list
- Connection and Profiles — Managing saved profiles
- Configuration — Data folder and language settings