Microsoft Teams
Review minimum OAuth scopes for Microsoft Teams actions and the impact of Sites.Selected on channel attachments.
Review the minimum standard delegated scope mapping for every Microsoft Teams action. The mapping covers chats, teams, channels, messages, users, meetings, and attachments.
Minimal scopes per action
Action Description Minimum scopes
Find chat Finds a chat. Chat.ReadWrite
Get channel message Gets a channel message and its attachments. ChannelMessage.Read.AllFiles.ReadWrite.All
Get channel messages Gets channel messages and their attachments. ChannelMessage.Read.AllFiles.ReadWrite.All
Get chat messages Gets chat messages and their attachments. Chat.ReadWriteFiles.ReadWrite.All
Get meeting transcript Gets a meeting transcript. Calendars.ReadWriteOnlineMeetings.ReadOnlineMeetingTranscript.Read.All
List all channels Lists channels. Channel.ReadBasic.All
List all chats Lists chats. Chat.Read
List all teams Lists teams. Team.ReadBasic.All
List all users in channel Lists users in a channel. ChannelMember.Read.All
List all users in chat Lists users in a chat. Chat.Read
List online meetings Lists online meetings. Calendars.ReadWrite
Reply to channel message Replies to a channel message and can include attachments. Channel.ReadBasic.AllChannelMember.Read.AllChannelMessage.SendFiles.ReadWrite.All
Resolve channel Resolves a channel. Channel.ReadBasic.AllTeam.ReadBasic.All
Resolve chat Resolves a chat. Chat.Read
Resolve meeting Resolves a meeting. Calendars.ReadWrite
Resolve team Resolves a team. Team.ReadBasic.All
Search messages Searches messages in channels and chats. ChannelMessage.Read.AllChat.ReadWrite
Search users Searches users. User.Read.All
Send channel message Sends a channel message and can include attachments. Channel.ReadBasic.AllChannelMember.Read.AllChannelMessage.SendFiles.ReadWrite.All
Send chat message Sends a chat message and can include attachments. Chat.ReadWriteFiles.ReadWrite.All
Actions affected by Sites.Selected
The following actions may not work completely when handling channel attachments with selected site permissions:
When the action reads a channel attachment, it resolves the channel folder through the Microsoft Graph /teams/{teamId}/channels/{channelId}/filesFolder endpoint. Sites.Selected doesn't authorize this lookup, so attachment retrieval can fail even when the selected site grant allows direct file access.
When the action reads channel attachments, it resolves the channel folder through the Microsoft Graph /teams/{teamId}/channels/{channelId}/filesFolder endpoint. Sites.Selected doesn't authorize this lookup, so attachment retrieval can fail even when the selected site grant allows direct file access.
When the action sends a channel attachment, it resolves the channel folder through the Microsoft Graph /teams/{teamId}/channels/{channelId}/filesFolder endpoint. Sites.Selected rejects this lookup before the file upload or reply request.
When the action sends a channel attachment, it resolves the channel folder through the Microsoft Graph /teams/{teamId}/channels/{channelId}/filesFolder endpoint. Sites.Selected rejects this lookup before the file upload or message request.