Microsoft Teams setup guide

Agents read conversations and write messages for your company. Anything a customer or the public sees, such as a sent email or a posted message, is tier 3, so it asks first unless you decide otherwise.

To put Microsoft Teams to work after connecting it, see Approvals in Slack and Teams.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open Microsoft Teams, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

Your Microsoft Entra app registration

Your OAuth app.

This way signs in with an OAuth app you create for Microsoft Teams, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. Create a Microsoft 365 user with a Teams license for the agent (for example "Everdeck Agent"). Graph lets apps post messages only on behalf of a signed-in user, so messages appear from the account that connects here.
2. Open https://entra.microsoft.com and go to Entra ID > App registrations > New registration. Under Supported account types choose "Single tenant only" and add a Web redirect URI: https://everdeck.io/api/oauth/callback.
3. Under API permissions, add Microsoft Graph delegated permissions offline_access, User.Read, Team.ReadBasic.All, Channel.ReadBasic.All, ChannelMessage.Read.All, ChannelMessage.Send, Chat.Read, ChatMessage.Send and Chat.Create, then click "Grant admin consent" (ChannelMessage.Read.All always needs it).
4. Under Certificates & secrets, create a client secret and copy its Value.
5. Copy the Application (client) ID and Directory (tenant) ID into the form, click Connect, and sign in as the agent's account. Add that account to the teams and chats it should work in.

Field	What to enter
Directory (tenant) ID	Text. For example 00000000-0000-0000-0000-000000000000.

The scopes Everdeck asks for:

• offline_access
• User.Read
• Team.ReadBasic.All
• Channel.ReadBasic.All
• ChannelMessage.Read.All
• ChannelMessage.Send
• Chat.Read
• ChatMessage.Send
• Chat.Create

Disconnecting deletes the tokens Everdeck saved. Remove Everdeck at https://myapps.microsoft.com (work or school accounts) or https://account.live.com/consent/Manage (personal accounts).

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• List teamsTier 0 · ReadReads outside contentmicrosoft_teams_list_joined_teams

  List the teams the connected account belongs to.

• List channelsTier 0 · ReadReads outside contentmicrosoft_teams_list_channels

  List the channels in a team.

• Read channel postsTier 0 · ReadReads outside contentmicrosoft_teams_list_channel_messages

  Read top-level posts in a channel (without replies), ordered by latest activity. Bodies are HTML. Use list_message_replies for a post's replies.

• Read replies to a postTier 0 · ReadReads outside contentmicrosoft_teams_list_message_replies

  Read the replies to one channel post.

• Post in a channelTier 3 · Externalmicrosoft_teams_post_channel_message

  Start a new post in a channel. content is simple HTML (<p>, <br>, <b>, <i>, <ul><li>, <a href>).

• Reply to a channel postTier 3 · Externalmicrosoft_teams_reply_to_channel_message

  Reply in the thread of a channel post. content is simple HTML.

• List chatsTier 0 · ReadReads outside contentmicrosoft_teams_list_chats

  List the account's one-on-one, group and meeting chats with their members.

• Read chat messagesTier 0 · ReadReads outside contentmicrosoft_teams_list_chat_messages

  Read the newest messages in a chat. Bodies are HTML.

• Send a chat messageTier 3 · Externalmicrosoft_teams_send_chat_message

  Send a message in a one-on-one or group chat. content is simple HTML.

• Start a one-on-one chatTier 2 · ReversibleReads outside contentmicrosoft_teams_start_chat

  Get the one-on-one chat with a colleague (by email or user id), creating it if needed. Returns the chat id for send_chat_message.

• React to a chat messageTier 2 · ReversibleReads outside contentmicrosoft_teams_react_to_chat_message

  Add an emoji reaction to a chat message, for example 👍 to confirm you saw it.

• Search Teams messagesTier 0 · ReadReads outside contentmicrosoft_teams_search_messages

  Search the chat and channel messages the connected account can see (Microsoft Search), including attachment text. Returns each match's summary, sender, time, chat or channel, and link.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If Microsoft Teams later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using Microsoft Teams, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.