For the complete documentation index, see /llms.txt. The full corpus is available at /llms-full.txt. Most pages have a raw markdown variant; append .md to the URL or send Accept: text/markdown.
Try out Invert Assist free.Try Assist
PricingComplianceCareersBook a demoTry Assist free

Docs  |  FAQ

Connect Microsoft 365 to Assist (Work IQ)

Assist can read your Microsoft 365 data, such as files in SharePoint and OneDrive, through Microsoft Work IQ. Each user signs in with their own Microsoft account, so Assist sees only what that user can already open in Microsoft 365. By default, Assist uses only the Work IQ tools that read data.

Your Microsoft 365 administrator does steps 1 to 3 once for your organization. An Invert admin in your organization then does steps 4 and 5. Every other user then does step 6.

Before you start

  • A user with the Global Administrator role in your Microsoft Entra tenant.
  • An Azure subscription and resource group in the same tenant, to pay for Work IQ usage. Microsoft bills Work IQ in Copilot Credits.
  • Users do not need a Microsoft 365 Copilot licence. Microsoft bills Work IQ usage in Copilot Credits (Work IQ overview). We have tested only with users who have a licence, so if a user without one gets errors, contact Invert support.

Step 1: Enable Work IQ in your tenant

This creates the Work IQ service principal in your tenant. A Global Administrator runs this Azure CLI command:

az ad sp create --id fdcc1f02-fc51-4226-8753-f668596af7f7

If the command says the service principal already exists, Work IQ is already enabled. To do this without the CLI, see Microsoft's guide Enable your tenant for Work IQ.

Step 2: Set up billing for Work IQ

  1. Sign in to the Microsoft 365 admin center as a Global Administrator or Billing Administrator.
  2. Go to Copilot → Cost Management and select Get Started.
  3. Choose the Azure subscription to bill, and activate the default spending policy.
  4. Make sure the policy covers every user who will use Work IQ through Assist, and that Work IQ API is one of its services.

Microsoft's guide: Usage-based billing and cost management for Copilot Credits.

Without this step, users can sign in, but every Work IQ request fails with "The caller tenant does not have a billing policy configured for WorkIQ."

Step 3: Grant consent to the Invert app

A Global Administrator opens this link, replacing <your tenant ID> with your Microsoft Entra tenant ID, and accepts on behalf of the organization:

https://login.microsoftonline.com/<your tenant ID>/adminconsent?client_id=31b61d75-db45-4e6f-8201-e4b5f73aebd5

The Invert app asks for two delegated permissions. Both act only as the signed-in user:

  • WorkIQAgent.Ask (Work IQ): lets Assist use Work IQ.
  • Files.Read.All (Microsoft Graph): lets Assist download files larger than 4 MB from SharePoint and OneDrive.

You only need to do this once. If Invert later adds a permission, we will ask you to consent again.

Step 4: Add Work IQ in Invert

Do this after steps 1 to 3. You need the Admin role in Invert.

  1. In Invert, go to Settings → MCP servers and click Add server.
  2. Choose Microsoft Work IQ and click Add server. You do not enter a URL, client ID or secret.
  3. Sign in with your Microsoft work account when the sign-in window opens.

Invert then loads the Work IQ tools. For other MCP servers, see Add an MCP server to Assist.

Step 5 (optional): Approve the ask tool

Work IQ's ask tool is blocked by default, because Work IQ says it can change data. To let Assist use it, click Approve next to ask on the Work IQ server and add a note. After you approve it, Assist can call ask in sessions for every connected user in your organization. Automations never get it.

Step 6: Other users connect their account

The admin who added Work IQ in step 4 is already connected. Every other user does this:

  1. In Invert, go to Settings → Preferences.
  2. Under Connected accounts, click Connect next to Work IQ.
  3. Sign in with your Microsoft work account.

Assist can now use your Microsoft 365 data in your sessions. You can ask, for example, "Find the latest batch record in our SharePoint site and summarize it."

Troubleshooting

  • "Need admin approval" when a user signs in: a Global Administrator has not done step 3 yet.
  • "The caller tenant does not have a billing policy configured for WorkIQ.": finish step 2, and check that the user is in the spending policy.
  • A sign-in error that mentions a redirect URI (AADSTS50011): contact Invert support.
Configure SAML/SSO on Microsoft Entra ID (Azure AD)Add an MCP server to Assist