How to Integrate Retool with OneDrive

To access the Microsoft Graph API (which powers OneDrive), you need to register an application in Azure Active Directory. Navigate to the Azure Portal (portal.azure.com) and sign in with your organizational admin account. In the left navigation, click Azure Active Directory, then App registrations, then New registration. Give the app a name like 'Retool Graph API' and set Supported account types to 'Accounts in this organizational directory only' for most corporate setups. In the Redirect URI section, set the type to Web and enter Retool's OAuth callback URL: https://oauth.retool.com/oauth/server if you are using Retool Cloud (check Retool's resource configuration screen for the exact OAuth callback URL — it is displayed there). Click Register. After registration, note your Application (client) ID and Directory (tenant) ID from the Overview page — you need both. Next, click Certificates & secrets in the left menu, then New client secret. Enter a description and set an expiration period. Copy the Secret Value immediately (it is only shown once). Finally, click API permissions → Add a permission → Microsoft Graph → Delegated permissions. Search for and add: Files.ReadWrite.All (for full file access), Sites.Read.All (for SharePoint/OneDrive for Business drives), and User.Read (for basic user profile). Click Grant admin consent for [your tenant] to approve these permissions for your organization.

In Retool, navigate to the Resources tab and click Add Resource. Select REST API. Name the resource 'Microsoft Graph API' or 'OneDrive API'. In the Base URL field, enter https://graph.microsoft.com/v1.0. Scroll to Authentication and select OAuth 2.0 from the dropdown. The OAuth configuration requires several fields: for Authorization URL, enter https://login.microsoftonline.com/YOUR_TENANT_ID/oauth2/v2.0/authorize (replace YOUR_TENANT_ID with your actual tenant ID). For Token URL, enter https://login.microsoftonline.com/YOUR_TENANT_ID/oauth2/v2.0/token. For Client ID, enter the Application (client) ID from Azure AD. For Client Secret, enter the secret value you copied. For Scope, enter: https://graph.microsoft.com/Files.ReadWrite.All https://graph.microsoft.com/Sites.Read.All https://graph.microsoft.com/User.Read offline_access (the offline_access scope is required for Retool to receive a refresh token and keep sessions alive). Select 'Share OAuth 2.0 credentials between users' if you want all Retool users to share a single service account connection, or leave it unchecked to require each user to authenticate individually. Click Save Changes. After saving, click the 'Connect OAuth' button that appears — this opens the Microsoft login flow where you authenticate once to establish the token.

With the resource configured, build queries to browse OneDrive content. Create a query named 'getDrives' — set Method to GET, Path to /me/drives. This lists all drives accessible to the authenticated user (personal OneDrive and any SharePoint drives). Create a second query named 'getDriveRoot' — GET /drives/{{ driveSelect.value }}/root/children. This fetches the top-level items in the selected drive. To navigate into folders, create a query named 'getFolderContents' — GET /drives/{{ driveSelect.value }}/items/{{ folderSelect.value || 'root' }}/children. Add URL parameters: $select=id,name,size,lastModifiedDateTime,folder,file,webUrl,@microsoft.graph.downloadUrl and $orderby=name asc. The $select parameter limits which fields Graph returns, dramatically reducing response size. Add a transformer to normalize the response and differentiate between folders and files. Display the results in a Retool Table, using a 'Type' column derived from whether the item has a 'folder' or 'file' property in the response. Add a breadcrumb navigation using Text components that track the current path by storing folder navigation in a Retool State variable.

1// Transformer: reshape Graph API drive items for Retool Table
2const items = data.value || [];
3return items.map(item => ({
4  id: item.id,
5  name: item.name,
6  type: item.folder ? 'Folder' : (item.file?.mimeType || 'File'),
7  size: item.size
8    ? item.size > 1048576
9      ? `${(item.size / 1048576).toFixed(1)} MB`
10      : `${Math.round(item.size / 1024)} KB`
11    : '--',
12  modified: new Date(item.lastModifiedDateTime).toLocaleString(),
13  web_url: item.webUrl,
14  is_folder: !!item.folder,
15  child_count: item.folder?.childCount || 0
16}));

One of the most useful operational features is generating shared links programmatically. Create a query named 'createShareLink'. Set Method to POST. Path to /drives/{{ driveSelect.value }}/items/{{ filesTable.selectedRow.id }}/createLink. Set Body Type to JSON. In the Body, build a sharing link configuration: the 'type' field accepts 'view', 'edit', or 'embed'. The 'scope' field accepts 'anonymous', 'organization', or 'users'. The 'expirationDateTime' field takes an ISO 8601 date string for link expiry. Add a Form in a Retool Modal for creating share links: include a Select for link type (view/edit), Select for scope (organization/anonymous), Date Picker for expiration, and a Password field if you want to set a link password. After creating a link, the response contains a 'link.webUrl' that you can display to the user and offer a copy-to-clipboard button. For reviewing existing permissions, create a query named 'getPermissions' — GET /drives/{{ driveSelect.value }}/items/{{ filesTable.selectedRow.id }}/permissions — and display results in a secondary Table showing all grants for the selected item. Add a 'Revoke' button that triggers DELETE /drives/{{ driveSelect.value }}/items/{{ filesTable.selectedRow.id }}/permissions/{{ permissionsTable.selectedRow.id }}.

1// Create shared link body
2{
3  "type": "{{ shareLinkType.value }}",
4  "scope": "{{ shareLinkScope.value }}",
5  "expirationDateTime": "{{ shareLinkExpiry.value ? new Date(shareLinkExpiry.value).toISOString() : '' }}"
6}

To monitor storage consumption across your organization, use the Graph API's quota endpoints. Create a query named 'getMyDriveQuota' — GET /me/drive — which returns a 'quota' object with total, used, remaining, and deleted values in bytes. For tenant-wide monitoring (Admin access required), use GET /users with a select to get all users, then for each user run GET /users/{{ userId }}/drive to get their quota. However, querying individual user drives for all users is slow for large organizations. A better approach is to use a Retool Workflow that runs on a daily schedule: the workflow queries all users, fetches each user's drive quota, and stores the results in Retool Database. Your Retool app then queries Retool Database for fast dashboard loads. Create a Chart component bound to the quota data showing a horizontal bar chart of storage used per user. Add a Table showing users sorted by storage consumed, with color-coded indicators for those over 80% of quota. Create a Configuration Variable for the storage warning threshold percentage and reference it in conditional Table row coloring.

1// Transformer: compute storage usage stats from Graph API quota response
2const quota = data.quota || {};
3const totalGB = (quota.total / 1073741824).toFixed(1);
4const usedGB = (quota.used / 1073741824).toFixed(1);
5const usedPercent = quota.total > 0
6  ? Math.round((quota.used / quota.total) * 100)
7  : 0;
8
9return [{
10  total_gb: totalGB,
11  used_gb: usedGB,
12  remaining_gb: ((quota.remaining || 0) / 1073741824).toFixed(1),
13  used_percent: usedPercent,
14  status: usedPercent > 90 ? 'Critical'
15    : usedPercent > 75 ? 'Warning'
16    : 'OK'
17}];