Jul 07 2020 02:55 AM - edited Jul 07 2020 02:56 AM
Hi,
I have a user who would like to use a Teams custom app from a customer of ours. How can we verify the app and what it does before allowing it in our environment?
Jul 07 2020 08:56 AM
Hi @Par Linderoth I don't have a suggestion for verifying an app but I do have a document to share about managing them (maybe you've seen this already but just in case....).
https://docs.microsoft.com/en-us/microsoftteams/teams-custom-app-policies-and-settings
Jul 07 2020 08:57 AM
SolutionYou cant really, unless you have access to the code. The app description and the consent screen should give you an idea of the type of actions the application might perform, but that's usually a bit vague. You can certainly add it in a test tenant and play with it, run some traces and capture audit events, etc.
Jul 07 2020 08:57 AM
SolutionYou cant really, unless you have access to the code. The app description and the consent screen should give you an idea of the type of actions the application might perform, but that's usually a bit vague. You can certainly add it in a test tenant and play with it, run some traces and capture audit events, etc.