Teams integration - OnlineMeetings.ReadWrite.All - delete meetings??
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-23-2022 08:38 PM
Our security team is quite concerned with the ServiceNow/Teams integration requirement for API permission OnlineMeetings.ReadWrite.All. This permission allows for the possibility of user's calendar entries being deleted. I understand this is a valid concern, but I'm not able to find any details on this topic and wondering if anyone has gone over this topic before. Thanks!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-24-2022 10:14 AM
Hi Jason,
Here is an article on API permissions requested by ServiceNow.
ServiceNow uses that permission to initiate online meetings for Notify. It's not used to delete meetings.
The meeting recordings are stored on Microsoft's side, while ServiceNow stores the links to the recording in this table: notify_recording.