In this article you will learn how an administrator must set up the MS Teams account, the permissions that should be granted, in order to use the integration of this application with LMS.

Why is it necessary to request these permissions? This process is carried out due to the behavior of the Microsoft API. Its functioning is atomic, for each new action it requests a new permission. Therefore, for the integration to be possible you must activate all those listed here.

Get the IDs

The first step is to get the Teams connection data for your organization. For this, follow the steps listed in the following guide:

• Create a Microsoft Entra application and service principal that can access resources

Get the data for:

• tenantId
• clientId
• clientSecret

If you want to check the data is correct, the following method can be used to validate it:

curl --location 'https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token' \ --header 'Content-Type: application/x-www-form-urlencoded' \ --data-urlencode 'client_id={clientId}' \ --data-urlencode 'client_secret={clientSecret}' \ --data-urlencode 'scope=https://graph.microsoft.com/.default' \ --data-urlencode 'grant_type=client_credentials'

Give permissions

Then, to be able to use the feature, you need to give the necessary permissions. The steps required for this are included in the official documentation of the app, specifically in the articles:

• Create onlineMeeting
• Get meetingAttendanceReport

From the side menu, access the API Permissions section.

In these screenshots you can see all the permissions required for the integration to work correctly:

To add each of these permissions you must follow these steps. At the top of the list, click on the + Add a permission button.

In the Request API permission page, click on the Microsoft APIs tab.

It displays a list of available APIs, the only one you need is Microsoft Graph. If you have used it previously it will appear in the header, otherwise you will have to look for it in the list, and click on it.

It gives you two options: Delegated permissions or Application permissions. If you go back and check the required permissions list, next to each permission you will find the Type column where you can see which one to select in each case.

Whether you choose one or the other, you will access access to Select permissions section, where all the available permissions are displayed. Click on the check box next to each one to activate it. If the box is checked it is because the permission is already activated, you can click it again if you want to deactivate it. Finally you must click the Add permissions button at the bottom to apply the changes.

Besides the permissions, it is also necessary to add the following policy:

To use application permission for this API, tenant administrators must create an application access policy and grant it to a user to authorize the app configured in the policy to create online meetings on behalf of that user (with user ID specified in the request path).

Activate the integration

Finally, you need to activate and configure the LMS integration. This guide explains the necessary steps to set up this feature in the platform:

• Integration with Microsoft Teams

In order to integrate an Event you can follow this steps:

• Integrate an Event with Microsoft Teams

Through this process you create a client in Microsoft Teams, and only you have access to manage these permissions. You can also delete this client at anytime, which means that Netex will no longer be able to connect to it, and the integration will no longer work. It is a specific and regulated access path, and you are the only administrator.