Skip to main content

New in 2.5: Fluent design variant See what's new

Runs inside your tenant, on your permissions

How AURUM Navigation is built, what data it touches and what permissions it needs, written for IT and security teams.

30-day free trial · No credit card · Support in English & German

Architecture

Your Microsoft 365 tenant

In the browser

AURUM Navigation web part

Shows the page to visitors and the editor to page editors. The code is served from your app catalog.

Reads and saves with the signed-in user's own permissions

SharePoint Online

  • Page settings

    In the page itself, versioned with it

  • Templates

    Site Assets › AURUM Navigation (tenant-wide ones in the app catalog site)

  • Licence key

    App catalog tenant property, checked offline

Optional: reads the user's own Entra groups for audience targeting

Microsoft Graph

User.Read, delegated

Only if you use Entra groups as an audience.

AURUM servers: none

No call home, no tracking, no copy of your content. Nothing in the data path leaves Microsoft 365.

How AURUM Navigation works inside your Microsoft 365 tenant. Content your editors add from elsewhere (for example a YouTube video or an external image) loads from that service, like on any SharePoint page.

How it is built

  • Runs client-side in SPFx

    AURUM Navigation is a SharePoint Framework web part. It runs in the visitor's browser, inside your SharePoint tenant.
  • Uses the signed-in user's permissions

    It reads SharePoint content as the current user, so nobody sees more than they could see in SharePoint anyway.
  • No custom script required

    You do not need to allow custom script on your sites. The solution is installed from the tenant app catalog.
  • No vendor servers in the data path

    There is no AURUM cloud service behind the web part. Your content and configuration stay in Microsoft 365.
  • Stored and versioned with the page

    The configuration is saved in the SharePoint page itself, so it follows the page's version history and permissions.
  • Licence check without a call home

    The licence key is verified inside the web part. The licence code makes no network requests.

Exactly which permissions are requested

AURUM Navigation asks for as little as possible.

Exactly which permissions are requested
PermissionTypeWhy it is needed
Microsoft Graph · User.ReadDelegatedOnly needed for Microsoft Entra group targeting. Without it, targeting by users and SharePoint groups still works.

Deployment in four steps

  1. Upload the package

    Upload the .sppkg file to your tenant app catalog and deploy it.

    Who
    SharePoint admin
    Where
    Tenant app catalog
  2. Optional

    Approve the API permission

    If you use Entra group targeting, approve Graph User.Read in the SharePoint admin center.

    Who
    Microsoft 365 admin
    Where
    SharePoint admin center › API access
  3. Add the app to a site

    Add AURUM Navigation to the site where you want to build pages.

    Who
    Site owner
    Where
    Site contents › Add an app
  4. Install the licence

    Install the licence key with the supplied PowerShell script, then add the web part to a page.

    Who
    SharePoint admin, then editors
    Where
    PowerShell, then any modern page
.\Set-AurumNavigationLicense.ps1 `
  -TenantAdminUrl "https://<tenant>-admin.sharepoint.com" `
  -LicenseFile ".\AURUM-Navigation-Lizenz.txt"

Requires PowerShell 7 and the PnP.PowerShell module. The licence file comes with your trial or purchase.

To play YouTube or Vimeo videos, those domains must be allowed in your Content Security Policy. The installation guide explains how.

Read the full installation guide

GDPR and compliance

  • European vendor: AURUM GmbH, Nürnberg, Germany

  • Your data stays in your Microsoft 365 tenant

  • A data processing agreement is available on request

  • Support in English and German

Updates and licence expiry

  • Updates migrate your existing page configuration automatically

  • If a licence expires, your pages keep working. Only editing is locked.

  • Layouts are stored in your SharePoint, so there is no lock-in

What customers say

  • We had planned an agency project for our new intranet start page. In the end, our communications team built it themselves with AURUM Navigation. The deciding factor for us was that nothing leaves our tenant: no custom script, no external service. Our security review was done in one meeting, and the installation took under 30 minutes.

    Electricity grid operator · energy sector · Berlin · SharePoint Online

Talk to us about your security requirements

We are happy to walk through the architecture with your security team.

30-day free trial · No credit card · Support in English & German