Veritas Alta™ SaaS Protection Administrator's Guide
- Section I. Introduction to Veritas Alta™ SaaS Protection
- Section II. Administration
- Section III. Manage backups (connectors)
- Overview
- About backup jobs (connectors)
- Overview for adding backup jobs (connectors)
- Configuring the capture scope
- Configuring credentials
- Configuring Delete and Stub policies
- Apps Consent Grant utility
- Backup Exchange Online mailboxes
- Adding connectors for Exchange Online data
- Configuring the capture scope for Exchange connectors
- Configuring the capture scope for Exchange connectors
- Backup SharePoint Online
- Supported SharePoint Online sites and data for backup and restore
- Adding backup jobs (connectors) for SharePoint Online sites and data
- Backup Teams Sites collections
- Backup OneDrive for Business
- Backup Teams chats
- Backup Audit logs
- Backup Google Drive data
- Backup Gmail data
- Backup Salesforce data
- Backup Entra ID (Azure AD) objects
- Backup Box data
- Backup Slack data
- Backup EML data
- Managing backup jobs (connectors)
- Backup jobs (connectors) statuses
- Browsing the backed-up data
- Events
- Overview
- Section IV. Manage restores
- About restore
- Prerequisites for data restore
- Restore dashboard
- Restore Exchange Online mailboxes
- Restore SharePoint Online data
- Restore Teams chats and Teams Channel conversations
- Restore Audit logs
- Restore Box data
- Restore Google Drive data
- Restore Gmail data
- Restore Salesforce data and Metadata
- Restore Entra ID objects
- Restore Slack data
- Restore data to File server
- Restore options
- Section V. Manage data sharing
- Section VI. Manage data downloads
- Section VII. Manage Stors (Storages)
- Section VIII. Policies to manage the backed-up data
- About policies in Veritas Alta™ SaaS Protection
- Configuring policies for data retention (WORM policies)
- Configuring policies for data deletion (Deletion policy)
- Configuring policies for data tiering (Tiering policy)
- Configuring Tagging polices
- Managing policies
- Section IX. Manage users and roles
- Section X. Manage Discovery cases and searches
- Section XI. Manage Scopes
- Section XII. Manage auditing
API permissions for Teams chat
If you use the Microsoft 365 App Registrations mode to configure the connector for your Teams chat workload, Veritas Alta SaaS Protection must have the API permissions listed in the following table.
Table: List of API permissions required for Teams chat backup and restore
Used by Veritas Alta™ SaaS Protection | ||||
---|---|---|---|---|
Microsoft Graph | ChannelMessage.Send (Delegated Permissions) | Send channel messages. | Allows an app to send channel messages in Microsoft Teams, on behalf of the signed-in user. | To restore channel messages back to the destination channel. (User impersonated as channel member.) |
ChatMessage.Send (Delegated Permissions) | Send user chat messages. | Allows an app to send one-to-one and group chat messages in Microsoft Teams, on behalf of the signed-in user. | To restore chat messages back to the destination chat. (User impersonated as a chat member.) | |
ChatMember.ReadWrite.All | Add and remove members from all chats. | Add and remove members from all chats, without a signed-in user. | To retrieve the members of a chat, and during the restore process, add a member to the chat. This added member is used on behalf of that user for further chat message restoration. | |
Directory.Read.All | Read directory data. | Allows the app to read data in your organization's directory, such as users, groups and apps, without a signed-in user. | To get a list of users whose chats need to be backed up in a tenant to be backed up. | |
TeamMember.ReadWrite.All | Add and remove members. | Add and remove members from all teams, without a signed-in user. Also allows changing a team member's role, for example from owner to non-owner. | To add a member to Team, required during restore of message for public channels. | |
Chat.Read.All | Read all chat messages. | Allows the app to read all 1-to-1 or group chat messages in Microsoft Teams. | To read chat messages during backup using Microsoft Teams Export API. Also used to get information like chat name. | |
ChannelMember.ReadWrite.All | Add and remove members from all channels. | Add and remove members from all channels, without a signed-in user. Also allows changing a member's role, for example from owner to non-owner. | To add member to channel during restore of message for private channels. | |
ChannelMessage.Read.All | Read channel messages | Allows the app to read all channel messages in Microsoft Teams. | To read channel messages during backup using Microsoft Teams Export API. | |
Office 365 Exchange Online | full_access_as_app | Use Exchange Web Services with full access to all mailboxes. | Allows the app to have full access by Exchange Web Services to all mailboxes without a signed-in user. | To back up group chats or Teams posts, fetch data from User or Teams mailboxes by reading Teams Message data. The process is not applicable when using the Export API for backup. |