# MS Teams Agent

<table data-card-size="large" data-view="cards"><thead><tr><th></th><th></th><th data-hidden data-card-cover data-type="image">Cover image</th></tr></thead><tbody><tr><td><strong>Overview</strong></td><td><ul><li>Search and retrieve Teams messages, chats, and channel conversations through Blockbrain</li><li>Send messages to Teams channels or chats</li><li>Access and manage Teams meetings, including scheduling and joining</li><li>Retrieve and share files stored in Teams channels</li><li>Access team, channel, and user metadata for collaboration and automation</li><li>Automate workflows and notifications across Microsoft Teams</li></ul></td><td><a href="https://3232460952-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIabFtGTeQzwfWCzp8vd6%2Fuploads%2FUwHxKX9rpt3NC6yRBTXA%2FScreenshot%202025-12-04%20at%2013.51.34.png?alt=media&#x26;token=c5a58bce-5ede-4ad9-985e-556b4ebeed5e">Screenshot 2025-12-04 at 13.51.34.png</a></td></tr><tr><td><strong>Prerequisites</strong></td><td><ul><li>Complete the <a href="https://docs.en.theblockbrain.ai/for-users/agents">general setup steps</a> from the main AI Agents page</li><li>Ensure users have active Microsoft 365 accounts with access to Microsoft Teams</li><li>Verify appropriate Microsoft 365 licensing for Teams and related services</li></ul></td><td><a href="https://3232460952-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIabFtGTeQzwfWCzp8vd6%2Fuploads%2Fvi22Kf04WdMUhdg0dI0h%2FScreenshot%202025-12-04%20at%2013.51.48.png?alt=media&#x26;token=cc189408-a272-40e5-988b-b7486983d97e">Screenshot 2025-12-04 at 13.51.48.png</a></td></tr></tbody></table>

### Azure App Registration Configuration

#### Required API Permission

Add the following Microsoft Graph permissions to your app registration:

| Permission                 | Type      | Description                                                                                                                                                     |
| -------------------------- | --------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `offline_access`           | Delegated | Maintain access to data you have given it access to                                                                                                             |
| `Calendars.ReadWrite`      | Delegated | Read and write user calendars, including Teams meeting events                                                                                                   |
| `Chat.ReadBasic.All`       | Delegated | Read the names, descriptions, and basic properties of all channels in the organization — required for correct channel routing and messaging operations in Teams |
| `ChannelMessage.Send`      | Delegated | Send messages as the user in any channel in Microsoft Teams                                                                                                     |
| `Chat.ReadBasic`           | Delegated | Read basic information about the user's chats in Teams                                                                                                          |
| `Chat.ReadWrite`           | Delegated | Read and write all chat messages the user can access in Teams                                                                                                   |
| `Files.Read`               | Delegated | Read all files the signed-in user can access, including files shared in Teams channels and chats                                                                |
| `OnlineMeetings.ReadWrite` | Delegated | Read and create online meetings on behalf of the user in Teams                                                                                                  |
| `Presence.ReadWrite`       | Delegated | Read and update the user's presence information in Teams                                                                                                        |
| `Team.ReadBasic.All`       | Delegated | Read the names, descriptions, and basic properties of all teams in the organization                                                                             |
| `User.ReadBasic.All`       | Delegated | Read basic profiles of all users in the organization                                                                                                            |
| `openid`                   | Delegated | Sign in the user and allow the app to read the user's basic profile information                                                                                 |

> As alternative, you can use the `.default` scope (uses all scopes set in the app).

#### Redirect URL

* Add <https://nango.theblockbrain.ai/oauth/callback> as allowed redirect URL to your app registration

#### Permission Configuration Steps

1. In your Azure app registration, go to **API permissions**
2. Click **"Add a permission"** > **Microsoft Graph** > **Delegated permissions**
3. Search for and select each required permission
4. Click **"Add permissions"**
5. Click **"Grant admin consent"** (recommended for organization-wide deployment)

### Agent Configuration in Blockbrain

<div data-with-frame="true"><figure><img src="https://3232460952-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIabFtGTeQzwfWCzp8vd6%2Fuploads%2FxScdU3EWE1CPnUOwnXpB%2FScreenshot%202025-12-04%20at%2009.54.07.png?alt=media&#x26;token=d03b225e-dc49-4cb0-af81-8982fb2e7ede" alt=""><figcaption></figcaption></figure></div>

<div data-with-frame="true"><figure><img src="https://3232460952-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIabFtGTeQzwfWCzp8vd6%2Fuploads%2FHSo8teH0tMSrRIChJnpp%2FScreenshot%202025-12-04%20at%2009.54.21.png?alt=media&#x26;token=46a37cbc-a8aa-472c-971d-afd57ef02d34" alt=""><figcaption></figcaption></figure></div>

1. **Access Agent Settings**:
   * Navigate to your Blockbrain admin panel
   * Go to **Agents** > **MS Teams Agent**
   * Click **"Configure"**
2. **Enter Azure Credentials**:
   * **Client ID**: Enter the Application ID from your Azure app registration
   * **Client Secret**: Paste the client secret you generated
   * **Tenant**: Enter your Azure tenant ID
3. **Configure OAuth Scopes**:
   * Add each required scope individually using the **"Add"** button as mentioned [here](#required-api-permissions)
   * Each scope will appear as a removable tag
   * Use the **"X"** button to remove incorrect scopes
4. **Additional Configuration** (Optional):
   * Add custom key-value pairs if needed for specific MS Teams Agent requirements
   * Configure any organization-specific settings as necessary
5. **Save Configuration**:
   * Click **"Save"** to apply the settings
   * Wait for the confirmation message

### Alternative: Admin Consent Configuration

For simplified scope management with admin pre-approval:

1. In Azure, grant admin consent for all required Microsoft Graph permissions
2. In Blockbrain configuration, use the `.default` scope instead of individual scopes
3. This eliminates the need for users to consent to individual permissions

### Testing the MS Teams Agent

#### Verification Steps

1. **Connection Test**:
   * Use the built-in connection test in Blockbrain
   * Verify successful authentication with Microsoft Graph
2. **User Testing**:
   * Have a test user connect their Microsoft account
   * Attempt to access a known Teams channel, chat, or meeting
   * Verify message sending, chat retrieval, and meeting access functionality
3. **Permission Validation**:
   * Check that the agent can access the appropriate Teams, channels, and chats
   * Confirm read/write permissions are working correctly

### Common MS Teams Integration Use Cases

* **Message Search**: Find and retrieve messages across Teams channels and chats
* **Message Sending**: Send messages to channels or chats via the agent
* **Meeting Management**: Access, create, or update Teams meetings
* **File Access**: Retrieve files shared in Teams channels or chats
* **Presence & User Info**: Read and update user presence, access user and team metadata

### Troubleshooting

#### Authentication Issues

**Problem**: "Insufficient privileges" when accessing Teams resources

* **Solution**: Confirm the app registration has all necessary Teams and chat permissions (e.g., `Chat.ReadWrite`, `ChannelMessage.Send`).
* **Check**: Verify the user has access to the relevant Teams, channels, or chats in your organization.

#### Permission Errors

**Problem**: "Insufficient privileges" when accessing SharePoint

* **Solution**: Confirm the app registration has `Sites.Read.All` and `Files.Read.All` permissions
* **Check**: Verify the user has SharePoint access in your organization

#### Scope Configuration Issues

**Problem**: Scopes not saving correctly

* **Solution**: Add each scope individually using the "Add" button
* **Check**: Remove any duplicate or incorrect scopes using the "X" button

### Security Considerations

* **Data Access**: The agent inherits the user's Teams and Microsoft 365 permissions
* **Scope Limitation**: Access is limited to Teams, channels, and chats the authenticated user can access
* **Data Privacy**: Data is processed according to Blockbrain's data handling policies
* **Audit Trail**: Teams access is logged in both Azure AD and Microsoft 365 audit logs

### Next Steps

After successful MS Teams Agent configuration:

* Train users on MS Teams integration features
* Configure additional agents (e.g., SharePoint, Outlook) if needed
* Monitor usage and performance through Azure AD reports