Incident and Major Incident Teams Call

[burn907]

What should be a straightforward integration is becoming a headache. We need to do one click bridge calls for MIM with Teams Integration. However, the permissions needed through graph api requires onlinemeetings.readwrite.all

In a large shared tenant, this creates a non least privilege approach.

Any other way around this?

[Tanushree Maiti]

Hi  @burn907 

For the Integration you  need following permission from Azure :

Refer KB: KB1156873 API Permissions related to Microsoft Teams integration 

1. Users.Read.All (Application) This allows the app to get the details of the users, such as their Azure ID, which is required to start the meeting.
2. OnlineMeetings.ReadWrite.All (Application) This permission is required to initiate an online meeting.
3. Calls.InitiateGroupCall.All (Application) This permission is required to invite multiple participants to a call on behalf of a Bot.
4. Calls.JoinGroupCall.All (Application) This permission allows the bot to join the meeting as a participant. In order to read call details, the bot must first be a meeting participant.
5. TeamsAppInstallation.ReadWriteForChat.All (Application) This permission is required to add our app to an online meeting, as part of Meeting Extensibility.
6. TeamsTab.ReadWriteForChat.All (Application) This permission allows our app to open a tab with incident details within a meeting, as part of Meeting Extensibility.

So I guess you should talk to your project lead and convey same to Client  . 

In parallel, raise a case with Servicenow support (Hi ticket) , for the alternative ( if they can check with product team).