Skip to main content

Integration - Microsoft Teams

The SafeBase platform can integrate with Microsoft Teams to enable streamlined access workflows and provide notifications to SafeBase admins.

Written by Matt Szczurek

Overview

The SafeBase Bot for Teams enables organization members to receive notifications from the Trust Center within Teams.

Additionally, if is using AI Questionnaire Assistance, org members can Ask the SafeBase AI security questions and receive relevant answers directly back into their inbox.

Note: The Trust Center Teams Bot is now listed on the Teams Appstore.
​
Customers who installed the Beta/Early Access version via .zip upload do not need to reinstall, but will not receive future automated updates.
​
To receive automated updates provided by the Teams Appstore, uninstall from https://admin.teams.microsoft.com/ and reinstall with the new method.

Supported Notifications

Prerequisites

A user must be a Teams Global Admin AND a SafeBase admin to complete the installation.

Installation from Microsoft Marketplace

  • Navigate to the Trust Center Settings, Integrations tab, Communication Tools section and click Connect

  • Click Open SafeBase in Teams Store

  • A Microsoft Marketplace page will open

  • Click Get it now

  • Once the Deploy New App loads click Next

  • In the Add Users section, Entire Organization is usually selected but there is a capability to select the option for Specific users/groups

  • Click Next, then Finish Deployment

  • When the deployment is complete, click Done

  • The SafeBase Bot will now be available in the Integrated Apps library

Add to pinned apps policy

This section is completely optional but highly convenient and makes it easier to interact with the bot for the message extension and direct message functionality.
​
This will add the SafeBase bot to the Teams App setup policy.

  • Navigate to the Microsoft Teams admin center

  • Find Setup policies in the Teams Apps in the left nav

  • Click Global (or whichever policy name is required)

  • Scroll to find Pinned apps, click Add apps

  • In the Add pinned apps search bar, type SafeBase and select the SafeBase bot

  • Click Add

Connect in the Trust Center

Once the above is complete, navigate back to the Trust Center

  • Click Continue to connect

  • Select a team from the dropdown, click Next

  • Select an existing channel or create a new one

  • Click Save

  • After a brief wait time, a success message will be displayed

  • Navigate to Teams, a welcome message will be displayed if everything was deployed successfully

Usage

After connecting the integration in the Settings area, notifications will be sent to the SafeBase Notifications channel in the installed Team.
​
In order to interact with the notifications in Teams, the Teams member will need to link their Teams account to the Trust Center

Connecting a Teams account to a Trust Center account (Optional)

The easiest way to do this is to navigate to the SafeBase Bot and use the link command. (It can also be done upon interacting with a notification for the first time.)

  • In Teams, find the SafeBase bot channel

  • Type link

  • Click Link Teams & SafeBase Accounts

Note: This step is only required for Trust Center users who want to perform actions from within Teams, linking is only required once by the user.

Teams Commands

There are a number of commands that can be used when interacting with the SafeBase Teams Bot

Help

Using the Help command will display all information regarding the teams bot, very useful incase any information is needed for using the SafeBase Teams bot.

Ask SafeBase AI

Teams users can interact with the SafeBase Bot within Teams to query your Trust Library for answers to questions.

Note: Answers from SafeBase AI adhere to RBAC from within the Trust Center. Users will only have access to content that they have permission to use.

  • In Teams, click the + icon near the message bar and select SafeBase Bot.

  • Type a question in the box that appears

    • If the organization is using SafeBase's multi-product feature, users can specify which Product the AI should reference.

  • Click Ask Question and after processing, the result will automatically populate in the message box below.

Access Requests
​

Trust Center users that have linked their accounts can Approve or Deny the Access Request using the buttons within Teams.
​
All other users can click the Access Request link in the notification to be taken to the access request queue within SafeBase.

Questionnaire Assignments

If users are assigned a specific question in an open questionnaire within the SafeBase, this notification will trigger.

This notification will be sent as a DM to linked users and requires their Teams account be linked to SafeBase.

Answering Assigned Questions in Teams

Upon receiving this notification, the recipient can click the Go to question in SafeBase button to be taken directly to the assigned questionnaire in SafeBase.

  • Optionally, the user can click Answer via Teams to answer the question directly in their inbox, without having to leave Teams.

  • The SafeBase Bot will then display the assigned questionnaire row and provide an answer area, which vary depending on the question type.
    ​

Free answer/comment


​Multi-select/comment


After answering, the Teams user can indicate if they want to mark the question as approved and click Submit Answer to submit their response to SafeBase.

  • The assignment notification will then update to reflect the completion:

Questionnaire Submitted

This notification displays when a Trust Center account member submits a questionnaire via the self serve questionnaire submission button in the Trust Center.

Account access extension requested

This notification displays if an account member requests an extension for access within the Trust Center.

Assessment completed

This notification displays if an account has marked their Trust Center assessment as Complete

File / Bulk File downloaded

This notification will be displayed if a user downloads a file within the Trust Center, and additionally if a user utilizes the Bulk File Download button.

New subscriber

This notification is displayed if a public user or account member subscribes to Trust Center updates.
​
This can be via the Subscribe button or the subscribe link located in the access request modal.
​

Troubleshooting

If users are not receiving notifications

Please first reconnect the app. If issues persist reach out to support@safebase.io.

If the notifications do not include the questionnaire assignment

Check that the version has been updated to SafeBase Bot v1.1.0.

Advanced Permissions Information

This section is included to breakdown additional information regarding permission scopes required for this app.

TeamSettings.Read.All

  • Type: Both Application & Delegated (we use Delegated)

  • Application ID: 242607bd-1d2c-432c-82eb-bdb27baa23ab

  • Delegated ID: 48638b3c-ad68-4383-8ac4-e6880ee6ca57

  • Display Text: "Read teams' settings"

  • Description: Read all teams' settings, on behalf of the signed-in user

  • Admin Consent: Yes

  • Our Use: Reading team configuration and settings

ChannelMessage.ReadWrite

  • Type: Delegated only (we use Delegated)

  • Delegated ID: 5922d31f-46c8-4404-9eaf-2117e390a8a4

  • Display Text: "Read and write user channel messages"

  • Description: Allows the app to read and write channel messages, on behalf of the signed-in user. This doesn't allow the app to edit the policyViolation of a channel message.

  • Admin Consent: Yes

  • Our Use: Editing our own bot messages (e.g., updating notification cards)

Channel.Create

  • Type: Both Application & Delegated (we use Delegated)

  • Application ID: f3a65bd4-b703-46df-8f7e-0174fea562aa

  • Delegated ID: 101147cf-4178-4455-9d58-02b5c164e759

  • Display Text: "Create channels"

  • Description: Create channels in any team, on behalf of the signed-in user

  • Admin Consent: Yes

  • Our Use: Creating the "SafeBase Notifications" channel when setting up the integration

Channel.ReadBasic.All

  • Type: Both Application & Delegated (we use Delegated)

  • Application ID: 59a6b24b-4225-4393-8165-ebaec5f55d7a

  • Delegated ID: 9d8982ae-4365-4f57-95e9-d6032a4c0b87

  • Display Text: "Read the names and descriptions of channels"

  • Description: Read channel names and channel descriptions, on behalf of the signed-in user

  • Admin Consent: No (for delegated), but we request admin consent anyway

  • Our Use: Reading the list of channels in a team to check if "SafeBase Notifications" already exists

Team.ReadBasic.All

  • Type: Both Application & Delegated (we use Delegated)

  • Application ID: 2280dda6-0bfd-44ee-a2f4-cb867cfc4c1e

  • Delegated ID: 485be79e-c497-4b35-9400-0e3fa7f2a5d4

  • Display Text: "Read the names and descriptions of teams"

  • Description: Read the names and descriptions of teams, on behalf of the signed-in user

  • Admin Consent: No (for delegated), but we request admin consent anyway

  • Our Use: Reading channel/team info to find which team the bot is installed in

AppCatalog.Read.All

  • Type: Both Application & Delegated (we use Delegated)

  • Application ID: e12dae10-5a57-4817-b79d-dfbec5348930

  • Delegated ID: 88e58d74-d3df-44f3-ad47-e89edf4472e4

  • Display Text: "Read all app catalogs"

  • Description: Allows the app to read the apps in the app catalogs

  • Admin Consent: No (for delegated), but we request admin consent anyway

  • Our Use: Finding our SafeBase app in the Teams app catalog to verify it's installed

TeamsAppInstallation.ReadWriteForTeam

  • Type: Delegated only (we use Delegated)

  • Delegated ID: 2e25a044-2580-450d-8859-42eeb6e996c0

  • Display Text: "Manage installed Teams apps in teams"

  • Description: Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings.

  • Admin Consent: Yes

  • Our Use: Querying the team's installed apps to verify our bot is installed

ChannelSettings.Read.All

  • Type: Both Application & Delegated (we use Delegated)

  • Application ID: c97b873f-f59f-49aa-8a0e-52b32d762124

  • Delegated ID: 233e0cf1-dd62-48bc-b65b-b38fe87fcf8e

  • Display Text: "Read the names, descriptions, and settings of channels"

  • Description: Read all channel names, channel descriptions, and channel settings, on behalf of the signed-in user

  • Admin Consent: Yes

  • Our Use: Fetching and validating channel names and settings

User.Read.All

  • Type: Both Application & Delegated (we use Delegated)

  • Application ID: df021288-bdef-4463-88db-98f22de89214

  • Delegated ID: a154be20-db9c-4678-8ab7-66f6cc099a59

  • Display Text: "Read all users' full profiles"

  • Description: Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user

  • Admin Consent: Yes

  • Our Use: Looking up Teams User IDs from email addresses for direct messages (via Courier)

  • Note: Available for consent in personal Microsoft accounts

Related Articles
Integration - SafeBase Bot for Slack - Setup & Use
Integration - Microsoft Purview
Integration - Slack - Custom Notifications
Integration - Microsoft Dynamics 365 (Early Access)
Release Notes - February 2025
Did this answer your question?