Hardware Requirements:

Devices capable of running Microsoft Teams.

Software Requirements:

Latest version of Microsoft Teams.

Network Requirements:

Stable internet connection.

Domain Names to Validate:

For optimal network security and performance, ensure that the following domain names are accessible from your network:

• *.nbold.co
• *.nbold.io
• *.salestim.io
• *.microsoft.com
• *.azure.com
• *.office.com
• *.sharepoint.com
• *.teams.microsoft.com
• *.graph.microsoft.com

Authentication:

Integration with Entra ID, Formerly Azure Active Directory (AAD) for user authentication.

Service Account Requirements:

Must be able to sign-in interactively.

• Must have at least an active Office 365 E1 license.
• Must have an active license to Microsoft Teams, Exchange Online and SharePoint Online. 
• Must be assigned at least the Teams Administrator role.

• Active Azure AD P1 license if sensitivity labels are defined in your templates.

Required Permissions for the Service Account:

Permission	Type	Description	Admin Consent Required
openid	Delegated	Allows nBold to sign-in a user.	No
offline_access	Delegated	Allows nBold to retrieve a refresh token for the current user.	No
email	Delegated	Allows nBold to read the email address of the current user.	No
profile	Delegated	Allows nBold to read the basic profile (name, picture, user name) of the current user.	No

Permission	Type	Description	Admin Consent Required
openid	Delegated	Allows nBold to sign-in a user.	No
offline_access	Delegated	Allows nBold to retrieve a refresh token for the current user.	No
email	Delegated	Allows nBold to read the email address of the current user.	No
profile	Delegated	Allows nBold to read the basic profile (name, picture, user name) of the current user.	No
User.ReadBasic.All	Delegated	Allows nBold to retrieve the list of users from the directory.	No
Team.ReadBasic.All	Delegated	Allows nBold to retrieve the list of teams a user is a member of.	No
Channel.ReadBasic.All	Delegated	Allows nBold to retrieve the list of channels from the teams a user is a member of.	No
Mail.Send	Delegated	Allows the service account to send approval emails.	No
User.Read.All	Delegated	Allows the service account to search for users in the directory.	Yes
Directory.AccessAsUser.All	Delegated	Allows the app to have the same access to directory information as the signed-in user.	Yes
Group.ReadWrite.All	Delegated	Allows the service account to perform administrative operations on teams/groups.	Yes
Team.Create	Delegated	Allows the service account to create new teams.	Yes
TeamSettings.ReadWrite.All	Delegated	Allows the service account to retrieve and update teams settings.	Yes
TeamsAppInstallation.ReadWriteForTeam	Delegated	Allows the service account to install apps in a team.	Yes
TeamMember.ReadWrite.All	Delegated	Allows the service account to manage members of teams.	Yes
TeamsTab.ReadWrite.All	Delegated	Allows the service account to create and manage tabs.	Yes
Channel.Create	Delegated	Allows the service account to create and manage channels.	Yes
ChannelSettings.ReadWrite.All	Delegated	Allows the service account to manage channel settings.	Yes
ChannelMember.ReadWrite.All	Delegated	Allows the service account to manage channel members.	Yes
ChannelMessage.Read.All	Delegated	Read teams channels messages as part of the provisioning process.	Yes
ChannelMessage.ReadWrite	Delegated	Update an existing message.	Yes
ChannelMessage.Send	Delegated	Create a new team channel message.	Yes
Sites.FullControl.All	Delegated	Used to perform administrative operations on SharePoint sites.	Yes
Notes.ReadWrite.All	Delegated	Allows the service account to copy OneNote notebooks.	No
Reports.Read.All	Delegated	Used to gather statistics about teams, channels, and users.	Yes
ReportSettings.Read.All	Delegated	Used to determine if the Microsoft 365 reports are using anonymized IDs.	Yes
InformationProtectionPolicy.Read	Delegated	Allows the service account to retrieve and apply sensitivity labels.	No
Notifications.ReadWrite.CreatedByApp	Delegated	Used to send and manage native Microsoft Teams notifications.	No
People.Read	Delegated	Generate a ranked list of relevant people for the signed-in user.	No