Microsoft Teams: what this connector can do

Member·7 minutes to read

What this page is for

The setup guide is for whoever runs your organisation's Botseon deployment: how to register Botseon with the provider so its sign-in screen works. This page is the other half: what Microsoft Teams actually lets a bot do once it is connected to your account, what it asks you for along the way, its limits, and how to take the connection away again, in Botseon and at Microsoft.

Read and search channels and chats you are in, see who is in them, post, reply or start a chat with your approval, and react to a message, set your status, or delete your own message.

What a bot can do with it

Read — Microsoft Teams tells a bot things, nothing changes

Tool	What it does
`microsoft-teams.list_teams`	List the teams the account is in.
`microsoft-teams.list_channels`	List the channels of one team the account is in, each with the label a post names.
`microsoft-teams.list_channel_messages`	List the latest posts in a channel.
`microsoft-teams.read_thread`	Read one channel post with its replies, reactions and mentions.
`microsoft-teams.list_chats`	List the account’s one-to-one and group chats, each with the label a message names.
`microsoft-teams.read_chat`	Read the latest messages of a chat.
`microsoft-teams.search_messages`	Search the account’s chat and channel messages by keyword; each match has a link.
`microsoft-teams.list_members`	List the people in a chat, a team, or one channel of a team, with their emails.

Write — Microsoft Teams lets a bot change things

Tool	What it does
`microsoft-teams.post_message`	Post a new message to a channel.
`microsoft-teams.reply_in_thread`	Reply to a channel post, inside its thread.
`microsoft-teams.send_chat_message`	Send a message to a chat.
`microsoft-teams.create_chat`	Start a one-to-one or group chat with people by email, optionally with a first message.
`microsoft-teams.react_to_message`	React to a message in a channel or chat with an emoji.
`microsoft-teams.set_status`	Set the account’s Teams status message, optionally until a time.

Delete — Microsoft Teams lets a bot remove things

Tool	What it does
`microsoft-teams.delete_own_message`	Delete a message the account itself posted in a channel or chat. It refuses a message anyone else posted.

Seeing who is in a chat, team or channel

list_members shows the bot the people in a chat, a team or one channel you are in: their names, their work emails and whether they own it. A team, channel or chat you are not in gets nothing — the bot sees exactly the member list Teams shows you. A private channel lists its own people, not the whole team's.

Starting a chat

create_chat starts a chat with the people the bot names by work email. One person makes a one-to-one chat; if you already have one with that person, Teams hands back that chat instead of making a second. Two or more make a group chat, which can have a topic. You are always in the chat yourself, as its owner.

Before anything happens at Microsoft you get an approval card that lists exactly the emails the chat is with — the chat is made with those people and nobody else. If the bot also wrote a first message, it is sent once the chat exists, ending with the line that tells everyone it was written by an AI assistant. If there is no first message, that line is posted on its own, so the people in a chat your bot opened always know a bot opened it.

Starting a chat needs Allow sending on the plugin sheet, like every other send. Seeing members needs nothing more than the first sign-in.

The permissions it asks for, in plain words

Every call a bot makes through this connector is tagged with what kind of thing it is. Only the tags below ever apply here — a tag this connector's tools never carry is not listed, because it can never ask you for it.

read — Looks something up. Nothing changes, and nothing is sent anywhere. A bot never has to ask first for this.
write — Changes something inside the connected account — creates, edits or files something. Asks you first, unless you have told Botseon to always allow that exact action.
external_send — Sends something to someone outside Botseon — a message, a reply, an email, a post. Asks you first, unless always-allowed.
delete — Deletes something you would consider yours. Always asks first — there is no always-allow rule that ever covers this.

Limits

Read and search channels and chats you are in, see who is in them, post, reply or start a chat with your approval, and react to a message, set your status, or delete your own message. Nothing outside that list is possible through this connector, however a bot is asked to use it.

Microsoft Teams is also only ever as wide as the scopes your organisation's connected app actually requests — the exact scopes are on the setup guide, because narrowing or widening them is a decision for whoever runs your deployment, not for this page.

Disconnecting

In Botseon

Open Plugins from the sidebar, press this connector's card to open its detail page, and under Accounts press the ✕ next to the account (its label is "Remove account" and the name of the account), then Revoke and remove to confirm — or Uninstall to remove the plugin and every account connected to it at once. Either one revokes the stored connection immediately: nothing more is read or changed through it from that moment on. Install a plugin walks through the same screen step by step.

At Microsoft

Removing the account in Botseon also asks Microsoft to revoke the token, when this deployment's connector is configured with a revoke URL. Confirm the grant is actually gone by opening Microsoft's own account settings — the connected-apps, security or authorised-apps page covers it — and removing Botseon there too if it still shows up. That is also where you can revoke access without going through Botseon at all, which is worth knowing if you ever lose access to your Botseon account.

What Botseon keeps, and how your data is used

Whatever a bot reads or writes through this connector becomes part of your conversations and the record of that run — the same records, and the same retention schedule, as everything else a bot works on. Botseon is the processor for that content; your organisation decides what it may read and remember, and can delete it sooner than the schedule would on its own.

Your data is sent to a model provider only to produce the bot's answer, and for nothing else — it is not used to train any model. The Privacy Policy's Models and How long we keep it sections have the full detail, including exactly how long each kind of record is kept for.