Hi Nihanth,
If Microsoft Graph is completely restricted, I'd separate the two requirements because the alternatives are different.
For SharePoint document access without storing the files locally, the main limitation is that SharePoint itself is a Microsoft service. Without Microsoft Graph, your options are limited, but you can still:
For email notifications, you have several alternatives that work well with Mendix:
If your organization has disabled Microsoft Graph specifically for security reasons, I'd first check whether they're allowing SMTP with OAuth or an internal mail relay, as that's usually the simplest replacement for email.
One question: Is the restriction only on Microsoft Graph, or are all Microsoft 365 APIs (including SharePoint REST APIs) blocked as well? That will determine the best approach for the SharePoint documents.
Kindly mark this as the accepted answer if it helps.