Note: This integration it is currently in Closed Beta for Advanced and Enterprise customers only. To begin setup, please contact support@safebase.io and indicate that you would like to set up a Teams integration.
Overview
The SafeBase Bot for Teams enables your organization members to receive notifications from SafeBase within Teams.
Additionally, if your SafeBase organization is using AI Questionnaire Assistance, org members can Ask the SafeBase AI security questions and receive relevant answers directly back into their inbox.
Supported Notifications
Approve/deny requests directly from Teams.
Answer assigned questionnaire rows directly from Teams.
Prerequisites
A user must be a Teams Global Admin AND a SafeBase admin to complete the installation.
Permissions required by the SafeBase app for Teams
(Detailed information on permissions is located at the bottom of the article)
Setting | Info | Permission | Type |
| Team settings | Read | Delegated |
| Channel messages | Read/Write | Delegated |
| Create channels | Read/Write | Delegated |
| Basic channel info | Read | Delegated |
| Basic team info | Read | Delegated |
| Read app catalog | Read | Delegated |
| Install/manage team apps | Read/Write | Delegated |
| Read channel settings | Read | Delegated |
| Read users profile info | Read | Delegated |
Installation
Please reach out to your CSM or support@safebase.io to request the .zip that contains the Teams bot installation file.
Note: To install a new release with updated features, users are required to acquire a new install package from the SafeBase team.
1. Add the SafeBase Bot to your Teams Tenant
Navigate to Teams and select
Appsfrom the left vertical toolbar.Select
Manage Your Appsat the bottomAppstoolbar.
Select
Upload an app.Select
Upload an app to your org's app catalog.
Once the app has been uploaded, it should appear in Built for your org.
Click the
SafeBase Bot.Click
Add to a Team.Select the Team that you want the bot to post notifications to.
Click Finish.
2. Connect the SafeBase Bot to SafeBase
Login to SafeBase.
Navigate to
Settingsfrom the left vertical toolbar in SafeBase.Navigate to
Integrations.
To the right of Teams, click Connect.
Click
Consent on behalf of your organization.Click
Accept.A new Teams Channel named SafeBase Notifications will be created - this is where notifications will be sent.
You may need to click See all channels in order to see the new Channel.
Expand for screenshot
Expand for screenshot
You can add the channel to your Team's sidebar by clicking the Show button.
3. Include the SafeBase Bot as a Default App in Teams (Optional)
This video outlines how to include the SafeBase Bot in the default Teams user policy so that all users will receive the app once installed.
Usage
After connecting the integration in the Settings area, notifications will be sent to the SafeBase Notifications channel in the installed Team.
In order to interact with the notifications in Teams, the Teams member will need to connect their Teams account to SafeBase.
Connecting a Teams account to a SafeBase account (Optional)
This step is only required for SafeBase users who want to perform actions in SafeBase from within Teams, and should be completed one time by the user in question. Be sure they are already logged into SafeBase with appropriate permissions.
1. Upon interacting with a SafeBase notification for the first time, users will see the following notice:
3. Click Link Teams and SafeBase accounts, and log in to SafeBase if prompted.
4. The user can now take SafeBase actions directly from Teams notifications! 🎉
Ask SafeBase AI
Teams users can interact with the SafeBase Bot within Teams to query your Trust Library for answers to questions.
Answers from SafeBase AI will only use the information your SafeBase Account has permissions to within SafeBase.
1. In Teams, click the + icon near the message bar and select SafeBase Bot.
2. Type your question in the box that appears
If your organization is using SafeBase's multi-product feature, you can specify which Product the AI should reference.
3. Click Ask Question and after processing, the result will automatically populate in the message box below.
Access Requests
Contains:
Name
Company
Email Address
SafeBase users that have linked their account to Teams can Approve or Deny the Access Request using the buttons within Teams.
All other users can click the Access Request link in the notification to be taken to the Access Request Queue within SafeBase.
Questionnaire Assignments
This notification will be sent as a DM to linked users and requires their Teams account be linked to SafeBase.
Contains:
Account Name
Questionnaire Title
SafeBase direct link
If users are assigned a specific question in an open questionnaire within the SafeBase, this notification will trigger.
Answering Assigned Questions in Teams
Upon receiving this notification, the recipient can click the Go to question in SafeBase button to be taken directly to the assigned questionnaire in SafeBase.
Optionally, the user can click Answer via Teams to answer the question directly in their inbox, without having to leave Teams.
The SafeBase Bot will then display the assigned questionnaire row and provide an answer area, which vary depending on the question type.
Free answer/comment
Multi-select/comment
After answering, the Teams user can indicate if they want to mark the question as approved and click Submit Answer to submit their response to SafeBase.
The assignment notification will then update to reflect the completion:
Other Notifications
Questionnaire Submitted
Contains:
Account Name
Submitter
Link to the questionnaire in SafeBase
Account access extension requested
Contains:
Account Name
Requestor
Link to the request in SafeBase
Assessment completed
Contains:
Account Name
Link to the results in SafeBase
File downloaded
Contains:
Account Name
Account Member that downloaded the file
Item Name
File Name
Timestamp
File bulk downloaded
Contains:
Account Name
Account Member that downloaded the file
File Names
Timestamp
New subscriber
Contains:
Subscriber email
Link to all subscribers
Troubleshooting
If users are not receiving notifications
Please first reconnect the app. If issues persist reach out to support@safebase.io.
If the notifications do not include the questionnaire assignment
Check that the version has been updated to SafeBase Bot v1.0.1.
Advanced Permissions Information
This section is included to breakdown additional information regarding permission scopes required for this app.
TeamSettings.Read.All
TeamSettings.Read.All
Type: Both Application & Delegated (we use Delegated)
Application ID:
242607bd-1d2c-432c-82eb-bdb27baa23abDelegated ID:
48638b3c-ad68-4383-8ac4-e6880ee6ca57Display Text: "Read teams' settings"
Description: Read all teams' settings, on behalf of the signed-in user
Admin Consent: Yes
Our Use: Reading team configuration and settings
ChannelMessage.ReadWrite
ChannelMessage.ReadWrite
Type: Delegated only (we use Delegated)
Delegated ID:
5922d31f-46c8-4404-9eaf-2117e390a8a4Display Text: "Read and write user channel messages"
Description: Allows the app to read and write channel messages, on behalf of the signed-in user. This doesn't allow the app to edit the policyViolation of a channel message.
Admin Consent: Yes
Our Use: Editing our own bot messages (e.g., updating notification cards)
Channel.Create
Channel.Create
Type: Both Application & Delegated (we use Delegated)
Application ID:
f3a65bd4-b703-46df-8f7e-0174fea562aaDelegated ID:
101147cf-4178-4455-9d58-02b5c164e759Display Text: "Create channels"
Description: Create channels in any team, on behalf of the signed-in user
Admin Consent: Yes
Our Use: Creating the "SafeBase Notifications" channel when setting up the integration
Channel.ReadBasic.All
Channel.ReadBasic.All
Type: Both Application & Delegated (we use Delegated)
Application ID:
59a6b24b-4225-4393-8165-ebaec5f55d7aDelegated ID:
9d8982ae-4365-4f57-95e9-d6032a4c0b87Display Text: "Read the names and descriptions of channels"
Description: Read channel names and channel descriptions, on behalf of the signed-in user
Admin Consent: No (for delegated), but we request admin consent anyway
Our Use: Reading the list of channels in a team to check if "SafeBase Notifications" already exists
Team.ReadBasic.All
Team.ReadBasic.All
Type: Both Application & Delegated (we use Delegated)
Application ID:
2280dda6-0bfd-44ee-a2f4-cb867cfc4c1eDelegated ID:
485be79e-c497-4b35-9400-0e3fa7f2a5d4Display Text: "Read the names and descriptions of teams"
Description: Read the names and descriptions of teams, on behalf of the signed-in user
Admin Consent: No (for delegated), but we request admin consent anyway
Our Use: Reading channel/team info to find which team the bot is installed in
AppCatalog.Read.All
AppCatalog.Read.All
Type: Both Application & Delegated (we use Delegated)
Application ID:
e12dae10-5a57-4817-b79d-dfbec5348930Delegated ID:
88e58d74-d3df-44f3-ad47-e89edf4472e4Display Text: "Read all app catalogs"
Description: Allows the app to read the apps in the app catalogs
Admin Consent: No (for delegated), but we request admin consent anyway
Our Use: Finding our SafeBase app in the Teams app catalog to verify it's installed
TeamsAppInstallation.ReadWriteForTeam
TeamsAppInstallation.ReadWriteForTeam
Type: Delegated only (we use Delegated)
Delegated ID:
2e25a044-2580-450d-8859-42eeb6e996c0Display Text: "Manage installed Teams apps in teams"
Description: Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings.
Admin Consent: Yes
Our Use: Querying the team's installed apps to verify our bot is installed
ChannelSettings.Read.All
ChannelSettings.Read.All
Type: Both Application & Delegated (we use Delegated)
Application ID:
c97b873f-f59f-49aa-8a0e-52b32d762124Delegated ID:
233e0cf1-dd62-48bc-b65b-b38fe87fcf8eDisplay Text: "Read the names, descriptions, and settings of channels"
Description: Read all channel names, channel descriptions, and channel settings, on behalf of the signed-in user
Admin Consent: Yes
Our Use: Fetching and validating channel names and settings
User.Read.All
User.Read.All
Type: Both Application & Delegated (we use Delegated)
Application ID:
df021288-bdef-4463-88db-98f22de89214Delegated ID:
a154be20-db9c-4678-8ab7-66f6cc099a59Display Text: "Read all users' full profiles"
Description: Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user
Admin Consent: Yes
Our Use: Looking up Teams User IDs from email addresses for direct messages (via Courier)
Note: Available for consent in personal Microsoft accounts