Technical and Material Prerequisites

Hardware Requirements:

Devices capable of running Microsoft Teams.

Software Requirements:

Latest version of Microsoft Teams.

Network Requirements:

Stable internet connection.

Domain Names to Validate:

For optimal network security and performance, ensure that the following domain names are accessible from your network:

  • *.nbold.co
  • *.nbold.io
  • *.salestim.io
  • *.microsoft.com
  • *.azure.com
  • *.office.com
  • *.sharepoint.com
  • *.teams.microsoft.com
  • *.graph.microsoft.com

Authentication:

Integration with Entra ID, Formerly Azure Active Directory (AAD) for user authentication.


Service Account Requirements:

Must be able to sign-in interactively.

  • Must have at least an active Office 365 E1 license.
  • Must have an active license to Microsoft Teams, Exchange Online and SharePoint Online. 
  • Must be assigned at least the Teams Administrator role.
  • Active Azure AD P1 license if sensitivity labels are defined in your templates.

Required Permissions for the Service Account:

Permission Type Description Admin Consent Required
openid Delegated Allows nBold to sign-in a user. Non
offline_access Delegated Allows nBold to retrieve a refresh token for the current user. Non
email Delegated Allows nBold to read the email address of the current user. Non
profile Delegated Allows nBold to read the basic profile (name, picture, user name) of the current user. Non


Permission Type Description Admin Consent Required
openid Delegated Allows nBold to sign-in a user. Non
offline_access Delegated Allows nBold to retrieve a refresh token for the current user. Non
email Delegated Allows nBold to read the email address of the current user. Non
profile Delegated Allows nBold to read the basic profile (name, picture, user name) of the current user. Non
User.ReadBasic.All Delegated Allows nBold to retrieve the list of users from the directory. Non
Team.ReadBasic.All Delegated Allows nBold to retrieve the list of teams a user is a member of. Non
Channel.ReadBasic.All Delegated Allows nBold to retrieve the list of channels from the teams a user is a member of. Non
Mail.Send Delegated Allows the service account to send approval emails. Non
User.Read.All Delegated Allows the service account to search for users in the directory. Oui
Directory.AccessAsUser.All Delegated Allows the app to have the same access to directory information as the signed-in user. Oui
Group.ReadWrite.All Delegated Allows the service account to perform administrative operations on teams/groups. Oui
Team.Create Delegated Allows the service account to create new teams. Oui
TeamSettings.ReadWrite.All Delegated Allows the service account to retrieve and update teams settings. Oui
TeamsAppInstallation.ReadWriteForTeam Delegated Allows the service account to install apps in a team. Oui
TeamMember.ReadWrite.All Delegated Allows the service account to manage members of teams. Oui
TeamsTab.ReadWrite.All Delegated Allows the service account to create and manage tabs. Oui
Channel.Create Delegated Allows the service account to create and manage channels. Oui
ChannelSettings.ReadWrite.All Delegated Allows the service account to manage channel settings. Oui
ChannelMember.ReadWrite.All Delegated Allows the service account to manage channel members. Oui
ChannelMessage.Read.All Delegated Read teams channels messages as part of the provisioning process. Oui
ChannelMessage.ReadWrite Delegated Update an existing message. Oui
ChannelMessage.Send Delegated Create a new team channel message. Oui
Sites.FullControl.All Delegated Used to perform administrative operations on SharePoint sites. Oui
Notes.ReadWrite.All Delegated Allows the service account to copy OneNote notebooks. Non
Reports.Read.All Delegated Used to gather statistics about teams, channels, and users. Oui
ReportSettings.Read.All Delegated Used to determine if the Microsoft 365 reports are using anonymized IDs. Oui
InformationProtectionPolicy.Read Delegated Allows the service account to retrieve and apply sensitivity labels. Non
Notifications.ReadWrite.CreatedByApp Delegated Used to send and manage native Microsoft Teams notifications. Non
People.Read Delegated Generate a ranked list of relevant people for the signed-in user. Non