Microsoft Teams setup

The Intric Teams integration uses Microsoft Graph with delegated permissions to access Teams data on behalf of signed-in users. Because reading channel messages is a sensitive permission, Microsoft requires admin consent before any user in the tenant can grant the integration access to their account.

This means:

• Zero access by default: without admin consent, no user can connect their account and the integration will not appear as available
• Admin consent is tenant-wide: once an admin consents, any user in the tenant can individually choose to connect their own Microsoft account
• Delegated access only: the app always acts on behalf of the signed-in user. It cannot access data that the user themselves cannot see in Teams
• No per-channel configuration: unlike SharePoint, there is no per-resource grant required. Access is governed entirely by the user’s own Teams membership

All configuration is done through the Microsoft Entra admin center (https://entra.microsoft.com). You must be a Global Administrator or Privileged Role Administrator in your Entra tenant to complete these steps.

Already set up another Microsoft integration? If you have already granted admin consent for Intric’s OneDrive or Outlook integration, the Intric app is already registered in your tenant. You may only need to grant consent for the additional Teams-specific permissions. Go to step 1 and check which permissions are already consented before proceeding.

Step 1: Grant admin consent for the Intric app

1. Go to https://entra.microsoft.com and sign in as an admin
2. Navigate to Identity → Applications → Enterprise applications
3. Search for Intric and open the app entry
4. Go to Permissions and click Grant admin consent for [your organization]
5. Review the requested permissions and confirm

The Intric Teams integration requests the following delegated permissions:

Permission	Purpose
Team.ReadBasic.All	List the teams the user is a member of
Channel.ReadBasic.All	List channels within those teams
ChannelMessage.Read.All	Read messages in channels the user has access to
Files.Read.All	Read files shared in Teams channels

If the Intric app is not yet present in your tenant’s Enterprise applications, users must attempt to sign in once so that the app appears, or your administrator can add it manually via the App Gallery or by application ID.

Step 2: Configure in Intric

Once admin consent has been granted:

1. Navigate to Admin in the main menu
2. Go to Integrations in the admin panel
3. Find and select Microsoft Teams from the list of available integrations
4. Enable the integration

No further per-team or per-channel configuration is required in Intric. Users will see the Teams integration available in My Integrations and can connect their own Microsoft accounts individually.

Revoking access

To remove admin consent (prevents all users from using the integration):

1. Go to https://entra.microsoft.com
2. Navigate to Identity → Applications → Enterprise applications → Intric
3. Go to Permissions and remove the admin consent grant for the Teams-specific permissions

Individual users who have already connected their Microsoft accounts will lose access immediately.

To revoke a single user’s access, the user can disconnect from My Integrations. Alternatively, an admin can revoke the user’s OAuth token from the Entra admin center under the user’s profile → Applications.

For the end-user guide, see Microsoft Teams.