Microsoft Excel

OAuth2 connection to a Microsoft account for Excel workbooks, worksheets, and tables.

Fields

FieldDescriptionRequired
Microsoft AccountConnected via OAuth2 — click "Connect Microsoft Excel" and sign in. No keys to paste; Falcon Builder stores encrypted access and refresh tokens.Yes

Setup Steps

  • Step 1: In Falcon Builder, go to Dashboard → Credentials → Add Credential and pick Microsoft Excel.
  • Step 2: Click Connect Microsoft Excel. You'll be redirected to Microsoft to sign in and approve access.
  • Step 3: Approve the requested permissions (read/write your files). On managed/work tenants, an administrator may need to grant consent first.
  • Step 4: You're returned to Falcon Builder with the account connected — the credential shows the signed-in email. No keys to copy or paste.

This is a standard OAuth2 connection. Falcon Builder stores encrypted access and refresh tokens and refreshes them automatically — no Azure app or client secret to manage yourself.

Permissions (Microsoft Graph scopes)

Requested during authorization:

  • Files.ReadWrite — read and write the workbooks in your own OneDrive
  • Files.ReadWrite.All — read and write files shared with you
  • User.Read — identify the connected account (Graph /me)
  • offline_access — keep the connection alive (refresh tokens)
  • openid, profile, email — sign-in and basic profile

Testing the Connection

After connecting, click Test Credential to verify access. The test calls GET /me on Microsoft Graph and confirms the connected account. A 401 means the token expired (it auto-refreshes when a workflow runs); reconnect if the test keeps failing.

Troubleshooting

  • MFA / AADSTS50076 / Conditional Access — the account is under a policy that requires multi-factor authentication. See Microsoft MFA & Conditional Access Errors — reconnect and complete the MFA prompt.
  • Cross-tenant shared files — the Microsoft Excel API can't write to a workbook that lives in another organization's tenant. Reading a shared workbook works (the file is downloaded and parsed); writing requires a credential in that tenant.
  • Token refresh failed — tokens refresh automatically. If refresh fails repeatedly, reconnect the credential.