The following instructions apply to Retention & Analytics customers. If you are using MCO eComms Keep and MCO eComms Review then refer to these alternate instructions.
Implementing and configuring Microsoft Teams Chat capture in R&A using the Microsoft Teams Chat Export API can be accomplished with the following steps:
Prerequisites
License requirements for Microsoft Teams Export API
Microsoft requires each covered user to have specific E5 licenses for the Export API in what is referred to as Security and Compliance (S+C)/Model A usage scenario. Customers are billed for usage beyond seeded capacity per user by Microsoft.
Specific licenses include:
Microsoft 365 E5/A5/G5
Microsoft 365 E5/A5/F5/G5 Compliance
Microsoft 365 F5 Security & Compliance
Microsoft 365 E5/A5/F5/G5 Information Protection and Governance
For more details on Microsoft licensing requirements see: Microsoft Purview Data Loss Prevention Graph APIs for Teams Data Loss Prevention (DLP) and for Teams Export
Required Administrator Permissions during Setup
While implementing the Microsoft Teams Chat capture within Retention & Analytics, a user will need to be sign in to Entra ID and Grant Admin Consent for the use of the enterprise app.
The Entra ID user must minimally have one of the following roles:
Cloud Application Administrator
Application Administrator
Required Application Permissions during runtime
For capturing Teams Chat for archiving, Application Permissions must be used since a specific user is not present. When consenting to use MCO eComms Teams Chat Archiver the following Graph API permissions will be authorized:
ChannelMember.Read.All
ChannelMessage.Read.All
Chat.Read.All
ChatMember.Read.All
Group.Read.All
TeamSettings.Read.All
User.Read.All
Identify your Microsoft Entra Tenant ID
You will need to supply your Microsoft Entra Tenant ID to connect your account with MCO eComms. This can be found by:
Logging into Microsoft Entra (https://entra.microsoft.com) with a Cloud Application Administrator or Application Administrator role.
Navigate to Home page.
Locate Tenant ID within the Basic Information area (Example: 6ed00009-0890-4ffa-9570-c000f4c5ea02) and copy it.
Identify the User Groups to be Exported
Once configured R&A will periodically request user chats based on the specific users and/or groups that you designate. Generally, we recommend using groups as this will make long term administration easier.
Before contacting MCO, we recommend identifying the user groups you wish to be used for the identification of covered users. R&A currently supports the ability to map any of the following:
User Emails
Distribution Lists
Security Groups
Teams Groups
By providing MCO with a groups of users by their relevant email addresses, our support team will configure those into the service. Subsequently, you are able to make changes to the members of these groups without needing to contact MCO for assistance.
Configure Microsoft Teams Chat for account
To complete the configuration of Microsoft Teams Chat you will need to:
Connect MCO Customer Support and request Teams Chat be enabled in your account.
Provide your Microsoft Entra Tenant ID and the list of User Groups to be monitored.
MCO Customer Support will enable Teams Chat within your R&A account (if not previously enabled) and provide a unique App Reistration link for you. As our app is not publicly listed this will be used to complete registration and consent.
While logged into Microsoft Entra (https://entra.microsoft.com/) with a user having a Cloud Application Administrator or Application Administrator role, click the registration link provided by MCO.
Follow the Microsoft prompts to grant consent to complete setup.
Map Users with their Microsoft Teams Chat identities
After your MCO eComms account is configured to access your Microsoft Teams account, you will then need to map specific user identities to this new Communication Source. Each user to be captured requires explicit configuration of Teams identities in their user profile.
Login to Central IT Dashboard (https://central.getwhistler.io/) with a Administrator role in your account, required for managing user profiles.
Navigate to Settings > User Management
For each desired users, locate their user profile and click edit.
On the Usernames tab select
Add Username.In the new source row select
Teamsfrom the drop-down of available sources and enter their Teams identity, which is usually an email address. Note: Multiple Teams identities may be added per User.When done click
Save Changes
Run an integration verification test
To test that Teams Chat is configured correctly:
Login to MS Teams with a user that has been configured with a Source Identity mapping in the prior section.
Type the following test messages:
A direct message to one other user
A direct message to a group of named users
A message to a public channel conversation
A message to a private channel conversation
Wait up to 24 hours. Microsoft Teams capture is processed once per day, typically between 12:00am and 5:00am UTC, regardless of your account timezone configuration.
Login to MCO eComms and navigate to the Archive.
Using the Source filter for Teams, search for all Teams Chat messages in the last week.
If configuration was successful your test messages from the prior day will all be discoverable in the archive search results.