Microsoft Teams Connector

Overview

Used for OneTrust Data Discovery Scanners, the Microsoft Teams Connector connects cataloged chat messages that have been classified.

Note:

This connector is currently under Public Preview. Contact OneTrust Support to request early access.

Pod Residency

o365-scanner

Category

Connection Application

Supported Scan Actions

Scan Type

Description

Catalog

This will currently only list all accounts. Can be used for MIP integration in the future.

Catalog & Scan

Catalog and scan messages by user or channel.

Credential & System Permissions

Important:

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base, and/or support resources.

Microsoft Teams APIs in Microsoft Graph that access sensitive data are considered protected APIs. These APIs require that you have additional validation beyond permissions and consent before you can use them. For more information, see Microsoft's documentation: Authentication and authorization to APIs in Azure API Management and Configure credential manager - Microsoft Graph API.

Object

Permissions

Type

User

Read

Delegated

User

User.Read.All

Application

User Chat

Chat.Read.All

Application

Channel Chat

ChannelMessage.Read.All

Application

Groups

Group.Read.All

Application

Teams

Team.ReadBasic.All

Application

Teams

TeamMember.Read.All

Application

Sample JSON

JSON 
{
    "clientId": "your_client_id",
    "clientSecret": "your_client_secret",
    "scopes": "https://graph.microsoft.com/.default",
    "tenantId": "your_tenant"
}

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Limits

  • Users per team

  • Channels per team

  • Messages per Channel

Scope

  • Include/Exclude Path Configurations: User, Team, Channel

Collected Objects and Fields

Objects

  • Accounts

  • Messages

Note:

These objects are just scanned not ingested. Embedded/pasted images are not included.

Fields

Field
Description
mail <String>

The SMTP address for the user

id <String>

The unique identifier for the user.

accountEnabled <Boolean>

The unique identifier for OneTrust's use.