Microsoft Teams configuration

This page describes how to set up authentication and permissions before creating the Microsoft Teams data store.

Set up authentication and permissions

You must set up authentication and permissions in Microsoft 365, which is crucial to allow Gemini Enterprise to access Microsoft Teams data.

Entra app registration for Microsoft Teams data store

You must set up a Microsoft Entra application registration to enable secure access to Microsoft Teams before you create the Gemini Enterprise data store.

To register Gemini Enterprise as an OAuth 2.0 application in Microsoft Entra, do the following:

1. Navigate to Microsoft Entra admin center .
2. In the menu, expand the Entra IDsection and select App registrations.
3. On the App registrationspage, select add New registration.
4. On the Register an applicationpage, create an app registration by doing the following:
   1. In the Namesection, enter a display name for the application.

      

   2. In the Supported account typessection, select Accounts in the organizational directory only. This option restricts access to users within your organization's Microsoft Entra tenant, which is appropriate for an enterprise application.
   3. In the Redirect URIsection, select Weband enter the following URL as web callback URL (or redirect URL):
      • https://vertexaisearch.cloud.google.com/oauth-redirect
   4. Click Register. Microsoft Entra creates your app and displays it on the All applicationspage.

Create an OAuth 2.0 configuration

To create a connection using the OAuth 2.0 authentication method, obtain a client ID, client secret, and tenant ID from your Microsoft Entra application registration page by following these steps.

Obtain client ID and client secret

To obtain the client ID and secret for the app , do the following:

1. Navigate to Microsoft Entra admin center .
2. In the menu, expand the Entra IDsection and select App registrations.
3. On the App registrationspage, select All applications.
4. Open the application you created.
5. On the app page, select Certificates & secrets.
6. Click add New client secret.
7. In the Add a client secretdialog:
   1. Enter a description for the secret.

      

   2. Select an expiry duration. We recommend selecting the default value.
   3. Click Add.
8. Copy the secret from the Valuecolumn ( Client Secret ) and the identifier from the Secret IDcolumn ( Client ID ), and store them securely for later use.

Obtain tenant ID

Your tenant ID can be found in the Tenant IDbox on the overview page in the Microsoft Entra admin center.

Configure the Microsoft Graph permissions

To configure the required Microsoft Graph permissions for the app , do the following:

1. Navigate to Microsoft Entra admin center .
2. In the navigation menu, expand the Entra IDsection and select App registrations.
3. On the App registrationspage, select All applications.
4. Open the application you created.
5. On the app page, select API permissions.
6. Click Add a permission.
7. In the Request API permissionspage, select Microsoft Graph, and select Delegated permissions.

8. Search for and select the following permissions for your connection mode. Ensure that an administrator grants consent for all the delegated permissions listed in the following table. Once consent is granted, the Statuscolumn displays Grantedwith a green tick mark (✓).

   Connection mode

   Permission

   Permission type

   Purpose

   Federated search

   Chat.Read

   Delegated

   Allows the app to read all chats.

   Chat.ReadBasic

   Delegated

   Allows the app to read basic properties of chats.

   ChatMessage.Read

   Delegated

   Allows the app to read all one-to-one and group chats messages.

   Channel.ReadBasic.All

   Delegated

   Allows the app to read the names and descriptions of channels.

   ChannelMessage.Read.All

   Delegated

   Allows the app to read user channel messages.

   Team.ReadBasic.All

   Delegated

   Allows the app to read the names and description of teams.

   User.Read

   Delegated

   Allows the app to sign in and read user profile.

   Federated search and actions

   Chat.Read

   Delegated

   Allows the app to read all chats.

   Chat.ReadBasic

   Delegated

   Allows the app to read basic properties of chats.

   ChatMessage.Read

   Delegated

   Allows the app to read all one-to-one and group chats messages.

   Channel.ReadBasic.All

   Delegated

   Allows the app to read the names and descriptions of channels.

   ChannelMessage.Read.All

   Delegated

   Allows the app to read user channel messages.

   Team.ReadBasic.All

   Delegated

   Allows the app to read the names and description of teams.

   User.Read

   Delegated

   Allows the app to sign in and read user profile.

   ChannelMessage.Send

   Delegated

   Allows the app to send messages in any channel.

   ChatMessage.Send

   Delegated

   Allows the app to send chat messages.

9. Click Add Permissions.

Grant administrator consent for permissions

To grant administrator consent for permissions, do the following:

1. Sign in to Microsoft Entra admin center as a global or application administrator.
2. In the navigation menu, expand the Entra IDsection and select App registrations.
3. On the App registrationspage, select All applications.
4. Open the application you created.
5. On the app page, select API permissions.

6. Click the Grant admin consent forbutton.

   

7. Select Yesin the dialog to confirm the consent action.