...
For authentication against SharePoint the SharePoint user directory is used. Following the (simplified) process of authentication and authorization is described:
When the user logs in to SharePoint a user token is created for this user.
The user token (together with some additionally required information) is then used to request an access token from SharePoint. Thus the access token is issued for this specific user.
The access token is then used for every request of data from the Confluence macro to SharePoint. That means that the response contains only SharePoint data that the logged in user is allowed to access.
How user permissions affect Confluence Macros
...
Image 3: Logged in SharePoint User can only see authorized SharePoint documents
Related Articles
How are Confluence user permissions are applied in SharePoint?
High Level Architecture (Server/DC Latest)