Microsoft Teams authentication

Prerequisites

Depending on the authentication type you select, you need one of the following credentials:

• Scope and your Microsoft username and password (for OAuth 2.0 Authorization code)
• Scope, Client ID, Client secret (for Bring your own OAuth 2.0 app)

The Scope represents the default scopes for regular user operations, such as: Team.Create Channel.Create ChannelMember.ReadWrite.All ChannelMessage.Send Chat.ReadWrite ChannelMessage.Read.All Calendars.ReadWrite.

You can add or remove scopes to customize user permissions for your connection. For details regarding scopes, see the Scopes section below, as well as the Microsoft documentation: Microsoft Graph permissions reference.

For creating a private OAuth2 app, follow the steps described in the Microsoft Teams documentation: Configure third party OAuth authentication - Teams.

Additionally, you must grant permissions to third party apps to access your information.

Grant permissions to third-party apps

Before establishing the connection, make sure permissions are granted for integrated apps from the admin center:

1. Log in to the Microsoft 365 admin center.

2. Go to Settings and select Org settings.

   
   

   

   
   

3. Under the Services tab, select User consent to apps.

   
   

   

   
   

4. Make sure the Let users provide consent when apps request access to your organization's data on their behalf checkbox is enabled and select Save.

   
   

   

   
   

Add the Microsoft Teams connection

To create a connection to your Microsoft Teams instance, you need to perform the following steps:

1. Select Integration Service from Automation Cloud^TM.

2. From the Connectors list, select Microsoft Teams. You can also use the search bar to narrow down the connector.

3. Select the Add connection button.

4. You are now redirected to the connection page. You can choose between two authentication types: OAuth 2.0 Authorization code or Bring your own OAuth 2.0 app.

   
   

   

   
   
5. Enter the required credentials.

6. Select Connect.

7. Your connection has been added.

For more information about authenticating in Microsoft Teams, see the Microsoft Authentication and authorization page.

Scopes and permissions

You can use this connection to enable the Microsoft Teams activity package in UiPath Studio to build automations for user and channel management, messaging, and other ways of working together. The various permission-based use cases that can be achieved are as follows:

Scope	Use case	Activity/Event
openid (Required)	By using this permission, an app can receive a unique identifier for the user in the form of the sub claim. The permission also gives the app access to the UserInfo endpoint. The openid scope can be used at the Microsoft identity platform token endpoint to acquire ID tokens. The app can use these tokens for authentication	N/A
offline_access (Required)	Required to receive refresh token in the authentication request endpoint. When you redeem an authorization code in the OAuth 2.0 authorization code flow without offline_access scope, you will not receive refresh token from the /token endpoint.	N/A
profile (Required)	Retrieving the current user profile such as name, username, email etc., so that it could be used as default/authenticated user at the connection creation and in certain activities	N/A
email (Required)	Allows the app to read all your users' primary email addresses, for sending messages or inviting them to a channel	Send Individual Chat Message Invite Member to Channel Invite User to Team
User.Read (Recommended)	Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users	Get Record → Me
Team.Create	Create a team for inviting and engaging the respective users	Insert Record → Teams
Team.ReadBasic.All	Retrieve the list of teams to be selected in the activities, such as sending a channel message etc.	Create Channel List All Channels Send Chat Message Send Individual Chat Message Invite Member to a Channel Reply to a Channel Message Send Channel Message Get Team by Name
TeamMember.ReadWrite.All	Add member to a team on behalf of the signed-in user Retrieve the list of members of a team	List All Team Members Invite User to Team Insert Record → Teams members List All Records → Teams members
Channel.Create	Create a channel (standard/private) for inviting and engaging the respective users of the team	Create Channel
Channel.ReadBasic.All	Retrieve the list of channels of a team to be selected in the activities such as sending a channel message etc.	Invite Member to a Channel Get Channel by Name Reply to Channel Message Send Channel Message
ChannelMember.ReadWrite.All	Add member to a channel on behalf of the signed-in user Retrieve the list of members involved in a channel	Invite Member to a Channel List All Records → Teams channels members
ChannelMessage.Send	Send a message in a channel. Also, reply to a message in a thread, if needed.	Reply to Channel Message Send Channel Message
ChannelMessage.Read.All	Allows the app to read all channel messages in Microsoft Teams, without a signed-in user Also used to trigger events whenever a message is posted in the channel or whenever a keyword is mentioned in the channel	Reply to Channel Message List all Channel Messages List All Records → Teams channels messages When a message posted in channel (Future) When a keyword or username is mentioned in channel (Future)
Chat.ReadWrite	Allows the app to read and send your 1:1 Allows the app to read and send group chat messages Also used to trigger events whenever a chat message is posted	Send Group Chat Message Send Individual Chat Message List All Chat Messages List All Records → Chats When a chat message is posted (Future)
ChatMember.ReadWrite	Add member to a chats on behalf of the signed-in user Retrieve the list of members involved in a chat	Insert Record → Chats members List All Records → Chats members