Microsoft Teams Integration Guide for Insights#
Introduction#
This guide provides steps for configuring the Microsoft Teams tenant for Insights integration.
Register MS Teams API on Microsoft Azure#
The MS Teams API configuration requires an initial application registration on Microsoft Azure.
In the Microsoft cloud portal, search for Microsoft Entra ID (formerly, Azure Active Directory):
Select Manage > App registrations, then select New Registration
Fill out a meaningful application Name to display to users and under Supported account types, select Accounts in this organization directory and click Register.
When the new application is registered, locate the Application (client) ID and Directory (tenant) ID on the next page and store these values in a secure location.
Select the API permissions menu under Manage and then select the following Application permissions:
Microsoft Graph:
AuditLog.Read.All
CallRecord-PstnCalls.Read.All
CallRecords.Read.All
DeviceManagementApps.Read.All
DeviceManagementConfiguration.Read.All
DeviceManagementRBAC.Read.All
DeviceManagementServiceConfig.Read.All
Device.Read.All
Directory.Read.All
GroupMember.Read.All
Group.Read.All
Organization.Read.All
OrgSettings-Microsoft365Install.Read.All
Reports.Read.All
ServiceHealth.Read.All
ServiceMessage.Read.All
Team.ReadBasic.All
TeamsActivity.Read.All
TeamSettings.Read.All
TeamworkAppSettings.Read.All
TeamworkDevice.Read.All
TeamworkTag.Read.All
User.Read.All
User.ReadBasic.All
Office 365 Management APIs:
ServiceHealth.Read
Grant admin consent:
From Certificates & secrets, create authentication from New client secret:
Copy the value and store in a secure location.
The following stored values will be used on the Arbitrator configuration dialog screen:
Application (client) ID
Client secret value
Directory (tenant) ID
Configure MS Teams Monitoring#
This procedure configures and enables the tenant collection from Insights Arbitrator.
Pre-requisites
Register MS Teams API on Microsoft Azure
To configure the tenant collection:
Log in to Insights Arbitrator, then click the toolbar Wrench icon to go to System Configuration settings.
In System Configuration, go to Archive Management > API Config settings.
Select MS Teams Config.
At Enabled, select either Enabled or Disabled.
Note
New tenants can be added and set to either enabled or disabled. API requests are made only when set to enabled.
Fill out stored values:
Note
These values should be for a client that is dedicated to this use and should not be used to request a token from any other source while the API collector is enabled.
At Customer, fill out the tenant id (Directory (tenant) ID).
At Name, fill out an easily identifiable account name.
At ClientID, fill out the client ID (Application (client) ID).
At ClientSecret, fill out the client secret value.
Click Verify Access to test access to the API.
If the result of verifying access to the API indicates successful data retrieval, click Save Data to save the configuration.
The image displays a success response:
Refresh the screen (move away from the configuration screen to another and back) to see the new configuration.