Appearance
Security and data
For administrators and IT
This page answers the questions IT and security teams ask before approving Sintel BI. You don't need it to build dashboards. Who does what?
Permissions Sintel BI requests
The Sintel BI package doesn't request any Microsoft Graph or other API permissions. When you install it, the data access confirmation is SharePoint's standard prompt for adding an app to the app catalog. No API access needs approving in the SharePoint admin centre for Sintel BI.
If you also use Sintel Apps, Sintel BI calls the Sintel Apps API with the signed-in user's Microsoft Entra token. That access is the one approved when Sintel Apps was installed.
Sintel BI runs in the browser with the signed-in user's own SharePoint permissions. It can only read and change what that user can already read and change. Setting it up on a site creates a few lists on that site, see Lists used by Sintel BI.
Where your data goes
| Data | Where it goes |
|---|---|
| SharePoint lists and libraries | Read straight from SharePoint by the user's browser. It doesn't pass through Sintel's servers. |
| Excel files | Downloaded from your SharePoint by the user's browser and read there. Only files in your own tenant can be used. |
| MS SQL databases | Queried by the Sintel BI backend, not by the browser. The connection string is stored encrypted on the backend and can't be read back. See MS SQL security questions. |
| Dashboards, data sources and settings | Stored in the Sintel BI lists on your site. |
What Sintel's servers receive
- Licence and version checks: your tenant URL, the site URL and the Sintel BI version.
- Usage counts: the number of dashboards and apps on each site, used to apply your licence limits.
- Setup: the email address entered when Sintel BI is configured on a site, used to activate your licence.
- MS SQL: the connection strings and queries of MS SQL data sources, and the query results on their way to the browser.
- Older data sources: for dashboards that still use first-generation data sources, the dashboard and data source names and types, for usage statistics.
The content of your SharePoint lists and Excel files isn't sent to Sintel.
See the privacy policy and terms of use.
Hosts to allow
If your network or proxy restricts outgoing traffic, allow these hosts from users' browsers:
| Host | Used for |
|---|---|
cdn.sintelapps.com | The Sintel BI app code, including over-the-air updates |
sintelbi.sintelapps.com | Licence and version checks, usage counts |
sintelclientlicensemanagement.azurewebsites.net | Licence management, for licence administrators only |
app.sintelapps.com | Sintel Apps integration (forms) and the licence request form |
sintelbisqlwesteurope.azurewebsites.net | MS SQL data sources |
If you use MS SQL data sources, also allow the Sintel BI backend's IP address 20.229.106.231 through your database firewall. See Allow Sintel BI through your firewall.
Pricing and support
Licences and support levels are listed on the Sintel pricing page. For security questions not covered here, contact info@sintelapps.com.