Microsoft Teams

This documentation for the Microsoft Teams integration describes the technical capabilities of this integration, including authorization, scopes/permissions, and utilized endpoints. For more information on how to integrate Microsoft Teams, visit our connection instructions.

Version

This integration utilizes the Microsoft Teams REST API v1.0.

Base URL

The base URL used for all Microsoft Teams API endpoints:

https://graph.microsoft.com/v1.0

---

Authentication & Authorization

The DataGrail Microsoft Teams integration connects using OAuth 2.0.

Scopes

The Microsoft Teams integration requires specific scopes that must be granted in order to function for a given capability.

Scope	Base	Access
offline_access	✅
Directory.Read.All		✅

Base Scopes

All base scopes must be granted in order to connect the integration with DataGrail. The remaining scopes are only required if enabling those capabilities

Endpoints Utilized

DataGrail uses the following endpoints to authorize and test the connection:

Method	Endpoint	Purpose	Docs
GET	https://login.microsoftonline.com/tenant_id/oauth2/v2.0/authorize	Request authorization
POST	https://login.microsoftonline.com/tenant_id/oauth2/v2.0/token	Get and refresh access token

---

Limits

Limits in Microsoft Teams are calculated using the leaky bucket algorithm. All requests that are made after rate limits have been exceeded are throttled and an HTTP 429 Too Many Requests error is returned. Requests succeed again after enough requests have emptied out of the bucket.

• DataGrail supports requests throttling to stay within 70-80% of specified service rate limits.
• DataGrail processes API responses with HTTP 429 status to interrupt requests, waiting and retrying (using an exponential backoff strategy).

---

Capabilities

Access

DataGrail's Microsoft Teams integration provides Synchronous Access capabilities for the following supported identifier category: Email.

Data Interactions

For Access requests, DataGrail will take the following actions:

1. List all teams for an organization (tenant).
2. For each detected team, get a list of direct members.

Endpoints Utilized

Method	Endpoint	Purpose	Docs
GET	/groups	List all teams
GET	/groups/group_id/members	Get a list of the team's direct members

---

System Detection

DataGrail provides continuous system detection, delivering a real-time inventory of your data assets.

Data Interactions

DataGrail's System Detection process runs once daily and performs the following actions:

1. List all teams for an organization (tenant).
2. Retrieve a list of apps installed for each detected team.

Endpoints Utilized

Method	Endpoint	Purpose	Docs
GET	/groups	List all teams
GET	/teams/team_id/installedApps	Retrieve a list of apps

---