Microsoft Excel
OAuth2 connection to a Microsoft account for Excel workbooks, worksheets, and tables.
Fields
| Field | Description | Required |
|---|---|---|
| Microsoft Account | Connected via OAuth2 — click "Connect Microsoft Excel" and sign in. No keys to paste; Falcon Builder stores encrypted access and refresh tokens. | Yes |
Setup Steps
- Step 1: In Falcon Builder, go to Dashboard → Credentials → Add Credential and pick Microsoft Excel.
- Step 2: Click Connect Microsoft Excel. You'll be redirected to Microsoft to sign in and approve access.
- Step 3: Approve the requested permissions (read/write your files). On managed/work tenants, an administrator may need to grant consent first.
- Step 4: You're returned to Falcon Builder with the account connected — the credential shows the signed-in email. No keys to copy or paste.
This is a standard OAuth2 connection. Falcon Builder stores encrypted access and refresh tokens and refreshes them automatically — no Azure app or client secret to manage yourself.
Permissions (Microsoft Graph scopes)
Requested during authorization:
Files.ReadWrite— read and write the workbooks in your own OneDriveFiles.ReadWrite.All— read and write files shared with youUser.Read— identify the connected account (Graph/me)offline_access— keep the connection alive (refresh tokens)openid,profile,email— sign-in and basic profile
Testing the Connection
After connecting, click Test Credential to verify access. The test calls GET /me on Microsoft Graph and confirms the connected account. A 401 means the token expired (it auto-refreshes when a workflow runs); reconnect if the test keeps failing.
Troubleshooting
- MFA /
AADSTS50076/ Conditional Access — the account is under a policy that requires multi-factor authentication. See Microsoft MFA & Conditional Access Errors — reconnect and complete the MFA prompt. - Cross-tenant shared files — the Microsoft Excel API can't write to a workbook that lives in another organization's tenant. Reading a shared workbook works (the file is downloaded and parsed); writing requires a credential in that tenant.
- Token refresh failed — tokens refresh automatically. If refresh fails repeatedly, reconnect the credential.