---
sourceDocument: Yokohama Employee Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/employee-service-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Employee Service Management

ft:clusterId :

    - emplsm

bundleId :

    - emplsm

workflow :

    - Employee


---

# Grant permissions to required Microsoft Azure apps

# Grant permissions to required Microsoft Azure apps {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Authorize the required pre-published apps to enable your ServiceNow instance to make API calls to Microsoft Azure to enable ServiceNow for Teams application workflows.

## Before you begin

Install Virtual Agent Lite or Virtual Agent. For more information see [Virtual Agent integration with messaging apps](https://www.servicenow.com/docs/access?context=va-integration-messaging-apps&version=yokohama&pubname=yokohama-conversational-interfaces&ft:locale=en-US).

To connect your ServiceNow instance to your Microsoft 365 tenant and to authorize apps, you must have both the external_app_install_admin role and the Global Administrator role in Microsoft 365. For information about the related Microsoft roles, see [Azure AD built-in roles](https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#available-roles).

Role required: External admin (external_app_install_admin). This role is installed on the base system as part of the installation of the Channel Proxy plugin.

## About this task

The ServiceNow for Teams pre-published apps are:

* Notify Connector: Install Notify Connector for Microsoft Teams to enable the chat to call feature. For more information, see [Notify connector for Microsoft Teams](https://www.servicenow.com/docs/6owCTexe2oPUbQTwOToDIQ "Notify connector for Microsoft Teams enables you to manage and initiate a Microsoft Teams meeting directly from any record such as an incident, or a task.").
* Request-based Chats
* SSO and Activity Notifications
{#authorize-multi-tenant-apps-mt__ul_j4t_ccc_qpb}

## Procedure

1. Navigate to AllServiceNow for Microsoft 365Install Azure apps.
2. Authorize the relevant app.
   1. Click Authorize in the row of the app entry.
   2. Provide the admin consent by selecting Accept.  
      For information on API permissions used in ServiceNow for Microsoft Teams integration, refer [ServiceNow for Microsoft Teams integration API permissions for Request-based chat and SSO](https://www.servicenow.com/docs/hDfjmyBUlYiZNUhghNIPuw "Following are API permissions requested by the ServiceNow integration with Microsoft Teams for Request-based chat and SSO.").

   {#authorize-multi-tenant-apps-mt__substeps_ytd_52c_qpb}  
   Upon successful authorization, a green check mark appears next to the app name and the Authorize button changes to Installed.

## What to do next

If the upn is different from email ID in your environment, go to [Enable connecting to meetings from Microsoft Teams](https://www.servicenow.com/docs/nVK3muaf1n8t7CO0~uIi0g "Create the OIDC provider configuration record that enables users to connect to meetings in the Microsoft Teams application."). If the upn is same as the email ID, go
to [Create and download the manifest file for pre-published apps](https://www.servicenow.com/docs/rl2JVAR28k55t_mLAsh76g "Create and download the ServiceNow for Microsoft Teams manifest file from your instance to enable Microsoft Teams to use the ServiceNow for Teams app.").

*[\>]: and then