Setting up an Access Policy for Microsoft Teams

Setting up an access policy

Microsoft requires that customers set up an access policy before Aptem is able to access the full API offered by Microsoft, including accessing transcriptions and recordings. Please find Microsoft’s documentation here.
The pre-requisites for setting up this policy are:

1. 1. Create Entra Security Group for users that the app can access. E.g MeetingAccessGroup.
   2. Add users to group - add all users (tutors/administrators) who you would like to be able to schedule events in Aptem & Teams. If a tutor who isn’t in the group tries to schedule an event in Aptem, the integration will fail, and the event will not be scheduled in Teams. Please ensure you develop an internal process to ensure new tutors or administrators are added to your access group.
   3. Get Security Group ID.
   4. Get Aptem Application ID.

An example Powershell query to setup an access policy can be found below:

In Powershell:

#Powershell install TeamsModule

Install-Module -Name MicrosoftTeams -Force -AllowClobber

#Connect with admin account (Enter creds when prompted) 
Connect-MicrosoftTeams

#Create new access policy

New-CsApplicationAccessPolicy -Identity OnlineMeetingAccess-Policy -AppIds "<Aptem App Id>" -Description "OnlineMeetingAccess"

#Grant access policy to security group

Grant-CsApplicationAccessPolicy -PolicyName OnlineMeetingAccess-Policy -Group "<Security Group Id>"

##ROLLBACK ONLY

#Revoke access policy from security group

Grant-CsApplicationAccessPolicy -Group "<Security Group Id>" -PolicyName $Null

#Remove Access Policy

Remove-CsApplicationAccessPolicy -Identity "<PolicyName>"