> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Teams

## Overview

This guide walks through how to create a Microsoft Teams connection and the permissions it requires to be used in Blink's Automated Case Management, across **Ingestion**, **Enrichment**, and **Response** workflows.

<Note>
  Permission requirements can vary by workflow type. See [Required Permissions](#required-permissions) for the full breakdown by connection option.
</Note>

***

## Creating a Connection

You can authenticate to Microsoft Teams in one of two ways. Both are supported across every Microsoft integration in Blink's Automated Case Management, so the connection you choose here can be reused elsewhere.

<Tabs>
  <Tab title="Microsoft Graph">
    Recommended if this connection will be reused across other Microsoft integrations in your Automated Case Management setup.

    ### Creating a Connection

    <Card title="Microsoft Graph Connection Guide" icon="arrow-up-right-from-square" href="https://docs.blinkops.com/docs/integrations/microsoft-graph">
      Follow this guide to create a Microsoft Graph connection
    </Card>

    ### Required Permissions

    <Accordion title="Required Permissions for Microsoft Graph">
      | Permissions |
      | - |
      | AuditLog.Read.All |
      | Calendars.ReadBasic |
      | Calendars.ReadWrite |
      | Calendars.ReadWrite.Shared |
      | Channel.Create |
      | ChannelMember.ReadWrite.All |
      | ChannelMessage.ReadWrite |
      | ChannelMessage.Send |
      | ChannelSettings.ReadWrite.All |
      | Chat.Create |
      | Chat.ReadWrite |
      | Chat.ReadWrite.All |
      | ChatMember.ReadWrite |
      | Device.Command |
      | Device.Read.All |
      | DeviceManagementApps.ReadWrite.All |
      | DeviceManagementManagedDevices.PrivilegedOperations.All |
      | DeviceManagementManagedDevices.ReadWrite.All |
      | Directory.AccessAsUser.All |
      | Directory.ReadWrite.All |
      | eDiscovery.ReadWrite.All |
      | Files.ReadWrite |
      | Files.ReadWrite.All |
      | Group.ReadWrite.All |
      | GroupMember.ReadWrite.All |
      | IdentityRiskyUser.Read.All |
      | IdentityRiskyUser.ReadWrite.All |
      | Mail.Read |
      | Mail.ReadBasic |
      | Mail.ReadWrite |
      | Mail.ReadWrite.Shared |
      | Mail.Send |
      | MailboxSettings.ReadWrite |
      | Notes.ReadWrite.All |
      | offline\_access |
      | OnlineMeetings.ReadWrite |
      | SecurityAlert.Read.All |
      | SecurityAlert.ReadWrite.All |
      | SecurityIncident.ReadWrite.All |
      | Sites.Manage.All |
      | Sites.ReadWrite.All |
      | TeamMember.ReadWrite.All |
      | ThreatHunting.Read.All |
      | User.EnableDisableAccount.All |
      | User.ManageIdentities.All |
      | User.Read |
      | User.ReadWrite.All |
      | User.RevokeSessions.All |
      | DeviceLocalCredential.ReadBasic.All |
      | SecurityCopilotWorkspaces.ReadWrite.All |
    </Accordion>
  </Tab>

  <Tab title="Microsoft Teams">
    Recommended if this connection will be used for Teams only.

    ### Creating a Connection

    <Card title="Microsoft Teams Connection Guide" icon="arrow-up-right-from-square" href="https://docs.blinkops.com/docs/integrations/microsoft-teams">
      Follow this guide to create a Microsoft Teams connection
    </Card>

    ### Required Permissions

    To support all Blink actions, these are the required application permissions:

    <Info>
      As a best practice, request the **least privileged permissions** that your app needs in order to access data and function correctly. Requesting permissions with more than the necessary privileges is poor security practice, which may cause users to refrain from consenting and affect your app's usage. For additional information, refer to Microsoft Graph permissions.
    </Info>

    | Least privileged permissions | Higher privileged permissions |
    | - | - |
    | `ChannelMember.ReadWrite.All` | `ChatMember.ReadWrite.All` |
    | `TeamMember.ReadWrite.All` | `Channel.Create` |
    | `Chat.Create` | `Directory.ReadWrite.All` |
    | `GroupMember.Read.All` | `Group.ReadWrite.All` |
    | `User.Read.All` | `Teamwork.Migrate.All` |
    | `User.ReadWrite.All` | `User.ReadWrite.All` |
    | | `Directory.Read.All` |
    | | `Group.Read.All` |
    | | `ChannelSettings.Read.All` |
    | | `ChannelSettings.ReadWrite.All` |
    | | `Chat.Read.All` |
    | | `TeamMember.ReadWrite.All` |
    | | `TeamMember.Read.All` |

    #### Response action permissions

    For the specific messaging actions Blink uses (Send a message, Ask the user a question / request approval), the minimum required scopes are:

    | Action | Scopes | Requirements |
    | - | - | - |
    | Send a message | `Chat.ReadWrite`, `User.Read.All` | Teams app registered with permission to send messages to users |
    | Ask a question / request approval | `Chat.ReadWrite`, `User.Read.All` | Teams app registered with permission to send messages to users |
  </Tab>
</Tabs>

<AccordionGroup>
  <Accordion title="Which stage of Alert Processing need this connection?" icon="table">
    | Source | Requires this connection? | Notes |
    | - | - | - |
    | Ingestion | ✗ No | Not applicable |
    | Enrichment | ✗ No | Not applicable |
    | Response | ✓ Yes | Sends messages and approval/question prompts to users via Teams |
  </Accordion>
</AccordionGroup>

***


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.