Teams

Overview

Microsoft Teams is a proprietary business communication platform developed by Microsoft, as part of the Microsoft 365 family of products. Teams offers workspace chat and videoconferencing, file storage, and application integration.

Entitle can manage both private and shared channels and teams in Microsoft Teams.

The following table shows which roles employees can request access to:

	Teams	Private Channel	Shared Channel
Guest	❌ Cannot request access	❌ Cannot request access	✅ Can request access
Member	✅ Can request access	⚠️ Need to first be in the corresponding team of the private channel to request access to it	✅ Can request access
Owner	✅ Can request access	⚠️ Need to first be in the corresponding team of the private channel to request access to it	✅ Can request access

This page will provide you with instructions on how to integrate Entitle and Microsoft Teams.

General guidelines

Entitle requires an Entra ID connection to integrate with Microsoft Teams.

To integrate your Azure AD with Entitle, you will need to:

Create an application on Entra ID, and extract Client and tenant IDs.
Create a secret, and extract its value.
Provide Entitle with adequate permissions for the application.

Prerequisites

The integration creator needs to have an Administrator account in Azure AD.

Set up Microsoft Teams to work with Entitle

Stage 1: Create an application

Go to the Microsoft Azure portal.
Click on Microsoft Entra ID.

Click on the App registrations tab in the left-side menu.

Then, click on New registration.

Give your app a Name and leave the rest as is. Then, click on Register.

Keep your Application (client) ID and Directory (tenant) ID for later. Then, click on Add a certificate or secret on the right side.

Click on New client secret.

In the pop-up window, choose a Description that you will remember and an expiration time of your choice. Keep in mind that you will have to create a new secret and hence a new integration when it expires. Once done, click Add.

Click on the copy icon to copy your new Client Secret Value and keep it for later.

Stage 2: Assign permissions to Graph API

Go to API permissions.

Click on Add a Permission.

Then pick Microsoft Graph.

Choose Application permissions.

Using the search bar that appears, find the following permissions and select them:

team.readbasic.all
teammember.readwrite.all
channel.readbasic.all
channelmember.readwrite.all
user.read.all

Example:

When you are done selecting all five permissions, click on Add permissions at the bottom of the screen.

Your screen should now look the same as the following image. Then, click on Grant admin consent for Default Directory, and then click Yes.

Creating the integration in Entitle

All that is left to do is create an integration on the Entitle application.

Log into Entitle and navigate to the Integrations page.
After clicking the Add Integration button, type Microsoft Teams in the Application field.
Don’t forget to set the Save on field with your configuration, i.e. your own hosted agent or Entitle’s cloud.

In the Connection JSON, client_id, secret, and tenant, paste the values of the Client ID, Client Secret, and the Directory (tenant) ID from the previous stages.

Example Connection JSON:

{
  "client_id": "The value of Application (client) ID",
  "secret": "The value of Client Secret",
  "tenant": "The value of Directory (tenant) ID"
}

Click Save, you are done!🎉