Implementing and configuring Microsoft Teams Chat capture can be accomplished with the following steps:
Prerequisites
License requirements for Microsoft Teams Export API
Microsoft requires each covered user to have specific E5 licenses for the Export API in what is referred to as Security and Compliance (S+C)/Model A usage scenario. Customers are billed for usage beyond seeded capacity per user by Microsoft.
Specific licenses include:
Microsoft 365 E5/A5/G5
Microsoft 365 E5/A5/F5/G5 Compliance
Microsoft 365 F5 Security & Compliance
Microsoft 365 E5/A5/F5/G5 Information Protection and Governance
For more details on Microsoft licensing requirements see: Microsoft Purview Data Loss Prevention Graph APIs for Teams Data Loss Prevention (DLP) and for Teams Export
Required Administrator Permissions during Setup
While implementing the Microsoft Teams Chat capture within MCO eComms, the signed in user will need to be able to also sign in to Entra ID and Grant Admin Consent for the use of the enterprise app.
The Entra ID user must minimally have one of the following roles:
Cloud Application Administrator
Application Administrator
Required Application Permissions
For capturing Teams Chat for archiving, Application Permissions must be used since a specific user is not present. When consenting to use MCO eComms Teams Chat Archiver the following Graph API permissions will be authorized:
ChannelMember.Read.All
ChannelMessage.Read.All
Chat.Read.All
ChatMember.Read.All
Group.Read.All
TeamSettings.Read.All
User.Read.All
Request Microsoft Teams Chat is enabled for your account
If not already available in your account, request from your MCO Customer Support Manager or [email protected] to have Microsoft Teams Chat enabled within your account.
Once enabled you will see a new option under Settings > Integrations for Microsoft Teams Chat.
You will also find a new Source mapping option available on User Profiles. This can be found on Settings > Users > Sources.
Identify your Microsoft Entra Tenant ID
You will need to supply your Microsoft Entra Tenant ID to connect your account with MCO eComms. This can be found by:
Logging into Microsoft Entra (https://entra.microsoft.com) with a Cloud Application Administrator or Application Administrator role.
Navigate to Overview page.
Locate Tenant ID within the Basic Information area (Example: 6ed00009-0890-4ffa-9550-c000f4c5ea02) and copy it.
Configure Teams Chat Integration in MCO eComms
Using the Integrations panel you will now configure the connection between MCO eComms and Microsoft Teams.
Login to MCO eComms (https://guide.fairwords.com) with a Administrator role in your account.
Navigate to Settings > Integrations to view the available MCO eComms integrations for your account.
Located Teams Chat panel and select the
...menu in the upper right corner to invoke that configuration menu.Select
Connectoption to display the configuration dialog.Paste your Microsoft Entra Tenant ID previously copied and click
Submit.Microsoft Entra Consent form will appear, prompting you to enter your Microsoft Entra Credentials and provide Consent to configure the MCO eComms Teams Chat Archiver. Note: This step requires a user with at least the Cloud Application Administrator or Application Administrator role.
Once Consent is submitted you will be redirected to MCO eComms.
Your MCO eComms account is now configured to capture Microsoft Teams Chat messages.
Map Users with their Microsoft Teams Chat identities
After your MCO eComms account is configured to access your Microsoft Teams account, you will then need to map specific user identities to this new Communication Source. Each user to be captured requires explicit configuration of Teams identities in their user profile.
Login to MCO eComms (https://guide.fairwords.com) with a Administrator role in your account, required for managing user profiles.
Navigate to Settings > Users
For each desired users, locate their user profile and click the pencil to edit.
Scroll to the Sources section of the User Profile and select
EditthenAdd Source.In the new source row, use the drop-down selector to choose
Teamsoption and enter their Teams identity, which is usually their main email address. Note: Multiple Teams identities may be added per User. Click the check to enter the row thenSavewhen done entering all desired identities.
Repeat steps 3 - 5 for each user that needs to have their Microsoft Teams chats captured. Only those users with Teams Source Identity specified will be always captured.
Run an integration verification test
To test that Teams Chat is configured correctly:
Login to MS Teams with a user that has been configured with a Source Identity mapping in the prior section.
Type the following test messages:
A direct message to one other user
A direct message to a group of named users
A message to a public channel conversation
A message to a private channel conversation
Wait up to 24 hours. Microsoft Teams capture is processed once per day, typically between 12:00am and 5:00am UTC, regardless of your account timezone configuration.
Login to MCO eComms and navigate to the Archive.
Using the Source filter for Teams, search for all Teams Chat messages in the last week.
If configuration was successful your test messages from the prior day will all be discoverable in the archive search results.