Forum Discussion

_uzin_'s avatar
_uzin_
Copper Contributor
Apr 18, 2024

why do i need delegate permission to provision the channels' email?

https://learn.microsoft.com/en-us/graph/api/channel-provisionemail?view=graph-rest-1.0&tabs=http

When I create a channel, I use application permissions.

But why do I need delegated permissions to provision the channel's emails?

Please let me know if there is another way to avoid using the delegated permission.

microsoft teams

1 Reply

  • Prasad_Das-MSFT's avatar
    Prasad_Das-MSFT
    Icon for Microsoft rankMicrosoft
    Apr 19, 2024

    _uzin_ - 

    When provisioning the email address for a channel in Microsoft Teams using the /teams/{team-id}/channels/{channel-id}/provisionEmail API, the least privileged permission required for this operation is ChannelSettings.ReadWrite.All for delegated permissions. This permission allows the app to read and write channel settings, which includes provisioning the email address for the channel.

    The reason why delegated permissions are required for this operation is to ensure that the app is acting on behalf of a user who has the necessary permissions to manage the channel settings. By using delegated permissions, the app can perform actions as the signed-in user, which helps maintain security and access control within the Teams environment.

     

     

    Thanks, 

    Prasad Das

    ------------------------------------------------------------------------------------------ 

    If the response is helpful, please click "**Mark as Best Response**" and like it. You can share your feedback via Microsoft Teams Developer Feedback link. Click here to escalate.