Runs inside your tenant, on your permissions
How AURUM Navigation is built, what data it touches and what permissions it needs, written for IT and security teams.
30-day free trial · No credit card · Support in English & German
Architecture
Your Microsoft 365 tenant
In the browser
AURUM Navigation web part
Shows the page to visitors and the editor to page editors. The code is served from your app catalog.
Reads and saves with the signed-in user's own permissions
SharePoint Online
Page settings
In the page itself, versioned with it
Templates
Site Assets › AURUM Navigation (tenant-wide ones in the app catalog site)
Licence key
App catalog tenant property, checked offline
Optional: reads the user's own Entra groups for audience targeting
Microsoft Graph
User.Read, delegated
Only if you use Entra groups as an audience.
AURUM servers: none
No call home, no tracking, no copy of your content. Nothing in the data path leaves Microsoft 365.
How it is built
- AURUM Navigation is a SharePoint Framework web part. It runs in the visitor's browser, inside your SharePoint tenant.
Uses the signed-in user's permissions
It reads SharePoint content as the current user, so nobody sees more than they could see in SharePoint anyway.No custom script required
You do not need to allow custom script on your sites. The solution is installed from the tenant app catalog.No vendor servers in the data path
There is no AURUM cloud service behind the web part. Your content and configuration stay in Microsoft 365.Stored and versioned with the page
The configuration is saved in the SharePoint page itself, so it follows the page's version history and permissions.Licence check without a call home
The licence key is verified inside the web part. The licence code makes no network requests.
Exactly which permissions are requested
AURUM Navigation asks for as little as possible.
| Permission | Type | Why it is needed |
|---|---|---|
Microsoft Graph · User.Read | Delegated | Only needed for Microsoft Entra group targeting. Without it, targeting by users and SharePoint groups still works. |
Deployment in four steps
Upload the package
Upload the .sppkg file to your tenant app catalog and deploy it.
- Who
- SharePoint admin
- Where
- Tenant app catalog
- Optional
Approve the API permission
If you use Entra group targeting, approve Graph User.Read in the SharePoint admin center.
- Who
- Microsoft 365 admin
- Where
- SharePoint admin center › API access
Add the app to a site
Add AURUM Navigation to the site where you want to build pages.
- Who
- Site owner
- Where
- Site contents › Add an app
Install the licence
Install the licence key with the supplied PowerShell script, then add the web part to a page.
- Who
- SharePoint admin, then editors
- Where
- PowerShell, then any modern page
.\Set-AurumNavigationLicense.ps1 `
-TenantAdminUrl "https://<tenant>-admin.sharepoint.com" `
-LicenseFile ".\AURUM-Navigation-Lizenz.txt"Requires PowerShell 7 and the PnP.PowerShell module. The licence file comes with your trial or purchase.
To play YouTube or Vimeo videos, those domains must be allowed in your Content Security Policy. The installation guide explains how.
Read the full installation guideGDPR and compliance
European vendor: AURUM GmbH, Nürnberg, Germany
Your data stays in your Microsoft 365 tenant
A data processing agreement is available on request
Support in English and German
Updates and licence expiry
Updates migrate your existing page configuration automatically
If a licence expires, your pages keep working. Only editing is locked.
Layouts are stored in your SharePoint, so there is no lock-in
What customers say
We had planned an agency project for our new intranet start page. In the end, our communications team built it themselves with AURUM Navigation. The deciding factor for us was that nothing leaves our tenant: no custom script, no external service. Our security review was done in one meeting, and the installation took under 30 minutes.
Electricity grid operator · energy sector · Berlin · SharePoint Online
Talk to us about your security requirements
We are happy to walk through the architecture with your security team.
30-day free trial · No credit card · Support in English & German