Teams integration - OnlineMeetings.ReadWrite.All - delete meetings??

Jason Powers
Tera Contributor

Our security team is quite concerned with the ServiceNow/Teams integration requirement for API permission OnlineMeetings.ReadWrite.All.  This permission allows for the possibility of user's calendar entries being deleted.  I understand this is a valid concern, but I'm not able to find any details on this topic and wondering if anyone has gone over this topic before.  Thanks!

1 REPLY 1

Fu
ServiceNow Employee
ServiceNow Employee

Hi Jason,

 

Here is an article on API permissions requested by ServiceNow.

ServiceNow uses that permission to initiate online meetings for Notify. It's not used to delete meetings.

The meeting recordings are stored on Microsoft's side, while ServiceNow stores the links to the recording in this table: notify_recording