1. Getting Started

1.1 Requirements

• SharePoint Online (not on-premises SharePoint Server).
• A modern browser: Microsoft Edge, Google Chrome, Mozilla Firefox, or Safari.
• SharePoint Administrator or Global Administrator to upload the .sppkg to the tenant app catalog.
• Site owner permission on the target site to add the web part and publish pages.
• Recommended: a dedicated site or page for the risk register.

1.2 Deploy the App (Tenant Administrator)

• Obtain the production package risk-matrix.sppkg.
• Open SharePoint Admin Center → More features → Apps → App Catalog and upload the package.
• When prompted, choose Deploy and make it available to all sites (or selected sites).
• If you will send email notifications, approve Microsoft Graph Mail.Send.

1.3 Add the Web Part (Site Owner)

• Create or edit a modern SharePoint page (or add a full-page app).
• Click + and search for Risk Matrix 365.
• Publish the page. Users open the app from that URL or from Teams after sync.

1.4 First-Time Setup

If lists have not been provisioned yet, a Complete Setup banner appears. A site owner must run the setup wizard. Until setup completes, most features are unavailable.

• Publish the page before running setup — the wizard does not run while the page is in edit mode.
• Click Complete Setup and wait until all lists are created.
• Open Settings → General to set the app name, risk ID prefix (default RISK-2026-), and program manager.

1.5 Sync to Teams

• In the App Catalog, open the Risk Matrix 365 package and choose Sync to Teams.
• Users add Risk Matrix 365 as a personal app or a channel tab that points at the SharePoint page.