How to Connect Multiple SharePoint Sites to Claude Cowork
Claude Cowork cannot reach a SharePoint site in a second Microsoft tenant, and guest access does not get you round it. Connect each Microsoft identity to Carly, add Carly to Claude once, and a single Cowork task can read or file across every tenant you already have access to. Carly holds your Gmail and Outlook mailboxes, both sets of calendars and your drives in the same place.
Many sites inside one tenant is the other question, and it needs no setup at all. That one is covered below too.
What the finished setup gives you
With one Carly connector in Cowork, you can:
- compare a client’s statement of work against your own master template;
- file a countersigned document to the tenant that owns it;
- search one named site instead of an entire tenant;
- hold two employers’ intranets side by side;
- work in a client tenant without their administrator consenting;
- start when a document lands rather than when you ask.
The tenants stay separate underneath. Carly supplies the routing, and Claude remains where you run the task.
Why the native Microsoft 365 connector does not solve this
Cowork has no connector list of its own. Anthropic’s wording is that “Chat and Cowork now share one home,” so the connector you configure in ordinary Claude settings is the one Cowork uses. There is no standalone SharePoint connector; it arrives inside Microsoft 365.
A second tenant is closed cryptographically, not by a setting. Anthropic’s security guide describes multi-tenant isolation as “cryptographically enforced through digitally signed access tokens that bind each user to their organization’s tenant,” and adds that “cross-tenant token access is prevented cryptographically by the design of Microsoft Graph’s OAuth 2.0 implementation.” Consent is per tenant as well: a Microsoft Entra Global Administrator grants a one-time consent inside every organization. Your own admin’s approval does nothing for a client’s tenant, and personal Microsoft accounts are excluded outright.
Guest access is the workaround everyone tries, and it fails for a specific reason. A guest signing into another organization is redirected to their own organization’s sign-in page for credentials, so the token Claude holds still binds to your home tenant. Microsoft caps it from the other side too: its Search documentation says a tenant-wide search scope “will be overridden for a guest user.” Guest access gets you into a client site in a browser, and does not make that tenant reachable by the connector.
There is one more blocker consultants hit. If the client runs Claude Enterprise with a verified domain and restricts verified-domain connectors to their own enterprise, connecting their identity to your Claude account fails at sign-in with “This corporate identity belongs to an Enterprise that manages access through their own Claude account.”
Many sites in one tenant is forced, not optional
Worth knowing before you try to narrow it. Anthropic documents that “the Microsoft 365 connector searches SharePoint across the entire tenant using the permissions of the user. Site-specific search restriction isn’t supported.” Search needs Sites.Read.All, and site-specific *.Selected scopes are not supported because the underlying search is tenant-wide.
What keeps that safe is the permission model: Claude mirrors your existing Microsoft 365 permissions, so a site you cannot open in a browser stays invisible. Anything you can open is in scope for every search, wanted or not. Anthropic’s own advice when answers come from the wrong place is to name the site or library in your prompt.
1. Sort your sites
| Site | Tenant | Native path in Cowork |
|---|---|---|
| Your team site | Your tenant | Yes, and always in scope |
| A contracts library | Your tenant | Yes, if you can open it |
| A project site you joined | Your tenant | Yes, with your permissions |
| A client site you are a guest in | Another tenant | No |
| A second employer’s intranet | Another tenant | No |
2. Connect the first tenant to Carly
- Sign in at carlyassistant.com.
- Open carlyassistant.com/integrations.
- Find SharePoint and click Connect.
- Authorize the first Microsoft identity.
- Verify the account in Carly’s connected list.
3. Add every other tenant
- Return to Carly’s integrations page.
- Select SharePoint → Connect again.
- Sign out of the preselected Microsoft session, or use a private window, so the next tenant’s sign-in appears.
- Repeat for every additional identity, client tenants you hold guest access to included.
- Verify the account after each authorization.
Unlimited connected emails and calendars are included, so the number of identities does not change the price.
4. Connect Carly to Claude Cowork
In Claude:
- Open Customize in the sidebar.
- Select Connectors.
- Click +, then Add custom connector.
- Paste
https://carlyassistant.com/mcp/. - Click Add and authorize your Carly account.
- In the Cowork task, open + → Connectors and enable Carly.
Anthropic documents this path in its remote MCP connector guide. Cowork is on paid plans only, and on Team or Enterprise an Owner enables connectors for the organization first.
5. Test each site read-only
One tenant per prompt until routing is reliable:
On the Databricks engagement site, list every document added to the delivery library in the last two weeks. Read only.
On our own intranet, find the current subcontractor agreement template and summarize the termination clause. Do not change anything.
Then the question that needed two tenants:
Compare the statement of work on the Databricks site with our master template on the company site and list every clause that differs, showing the source tenant for each document.
6. Reuse this routing prompt
Treat my primary Microsoft account as Company and the client tenant as Client. Always state the target site and tenant before saving, filing, or updating a document. Never write to a tenant I have not named.
Then name the target per action:
File the countersigned agreement to the Client delivery library and add the renewal date to the Company tracker.
Native Cowork versus Carly
| Need | Claude Cowork | Carly connector |
|---|---|---|
| Search many sites in one tenant | Yes, tenant-wide by default | Yes |
| Restrict search to a single site | No | Yes, per instruction |
| Respect existing SharePoint permissions | Yes | Yes |
| Create or update files in a library | Yes, after admin approval | Yes |
| Hold two tenants at once | No | Yes |
| Act when a document lands | No | Yes |
Inside a single tenant Cowork is strong. It mirrors your Microsoft permissions exactly and runs multi-step work across Outlook, OneDrive, and SharePoint together, and the tenant-wide search that annoys you when you want one site is the same thing that finds a document you had forgotten.
Across tenants it has nothing, and the trigger is missing too. Cowork’s scheduling is a cadence, hourly through weekly, and Anthropic is explicit that the connector is on-demand and “doesn’t run background searches,” so a file arriving starts nothing. Carly authorizes per account on your side, holds several Microsoft identities at once, and fires when the document lands. Carly offers free Zapier-style workflows; AI agents start at $35/month.
Quick fixes when a site does not appear
| Problem | Fix |
|---|---|
| Answers come from the wrong site | Name the SharePoint site or library in the prompt, or route it through Carly by name |
| A site in your tenant is invisible | Open it in a browser as the same account; if you cannot, ask the site owner |
| Write tools never appear | An Entra Global Administrator has not approved the expanded permission set yet |
| Cowork keeps asking approval per task | On Team or Enterprise, “Allow ‘Always allow’ for connector tools” is off by default |
| A client tenant is unreachable | That is tenant isolation rather than a permissions gap, and guest access will not cross it |
Frequently asked questions
Can Cowork reach a client’s SharePoint in another tenant?
Not natively. Tenant isolation is enforced cryptographically through signed tokens bound to one organization, and consent has to be granted by a Global Administrator in every tenant separately. Connecting each identity to Carly is what makes several reachable from one task.
Does guest access let Cowork see the client tenant?
No. A guest authenticates against their own home organization, so the token still belongs to your tenant, and Microsoft overrides tenant-wide search scope for guest users anyway.
Can Claude Cowork search multiple SharePoint sites?
Within one tenant, yes, and it cannot do anything else. Search runs across the whole tenant using your own permissions, and site-specific restriction is not supported.
Do I need my Claude organization to approve the connector?
Only on Team and Enterprise plans. An individual on Pro or Max needs the one-time Microsoft Entra consent and nothing on the Claude side.
Does Cowork do anything when a document lands in SharePoint?
No. Scheduling is cadence based, hourly through weekly or manual, and the connector runs on demand rather than watching for changes.
Related: What is Claude Cowork · Multiple SharePoint sites in Claude · Claude Cowork limitations · Best AI assistants for SharePoint
Ready to automate your busywork?
Carly schedules, researches, and briefs you—so you can focus on what matters.
See what people say
"Before Carly, I relied on a Calendly link, but the whole process felt impersonal and not very professional. Carly changed that by handling all the back-and-forth, so I'm no longer stuck in endless email threads trying to line up schedules.
Now Carly reaches out to candidates, shares my real-time availability, lets them pick a slot, then sends a Zoom link and drops it straight into my calendar. She sends reminders to both of us before each call, which has significantly reduced no-shows and last-minute confusion.
On top of scheduling, Carly acts like a full executive assistant, sending me my schedule the night before so I can prepare for each call. It reminds me of the old x.ai assistant, but Carly is noticeably smarter, faster, and better suited to my healthcare recruitment business."
