Yafo Holdings

Project Setup

A few details so we can connect the assistant to your documents and start building. Most of this takes about fifteen minutes. The folder question in section 2 may need some lead time, so it is worth starting there.

Prepared for
Your details

Who is filling this out

Section 1

People we need from your side

Two administrator roles, and one person we can ask questions during the build. They can all be the same person.

This person needs to be able to register an application and grant admin consent. It is free and does not require an Azure subscription.

Either way, we will also need one standard user account in your environment, with no elevated permissions, so we can sign in and test the assistant the way your team will use it, and support it afterwards. Access to the documents themselves is a separate grant, limited to the one folder identified in section 2.

Section 2

Where the documents live

If the files sit in one person's OneDrive, we recommend moving them into a SharePoint site before we begin. It lets us limit our access to that single folder rather than requesting broader access, and it protects the library if that person ever leaves.

Scanned pages have no readable text inside them, so they have to be read visually. Knowing the mix up front lets us choose the right approach for your library.

Section 3

Who should be able to use it

Access is granted per person and can be changed at any time, with a record of who asked what.

Section 4

What you want to ask it

Reference for your IT team

Whoever performs the setup, this is the full extent of what is needed. A Microsoft Entra app registration is free and does not require an Azure subscription.

  • Cloud Application Administrator role, time limited, only if you choose to have us do the setup. It does not grant access to mail, files or SharePoint content.
  • Delegated permissions: openid, profile and email, with admin consent
  • Read access to the single document folder identified above, granted to the application per site
  • One standard user account for our team, no elevated permissions, for testing and ongoing support
  • If using Teams: custom app upload enabled in the Teams admin center

Our indexer reads only that folder and stores a copy of the text on our secured server. The assistant answers from that stored copy and reaches nothing else in your environment.