Microsoft Teams configuration

Public preview: The federated search is in public preview. This feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the Service Specific Terms. Pre-GA features are available "as is" and might have limited support. For more information, see the launch stage descriptions.

This page describes how to set up authentication and permissions before creating the Microsoft Teams data store.

Set up authentication and permissions

You must set up authentication and permissions in Microsoft 365, which is crucial to allow Gemini Enterprise to access Microsoft Teams data.

Entra app registration for Microsoft Teams data store

You must set up a Microsoft Entra application registration to enable secure access to Microsoft Teams before you create the Gemini Enterprise data store.

To register Gemini Enterprise as an OAuth 2.0 application in Microsoft Entra, do the following:

1. Navigate to Microsoft Entra admin center.
2. In the menu, expand the Entra ID section and select App registrations.
3. On the App registrations page, select add New registration.
4. On the Register an application page, create an app registration by doing the following:
   1. In the Name section, enter a display name for the application.

      

      Register an application page

   2. In the Supported account types section, select Accounts in the organizational directory only. This option restricts access to users within your organization's Microsoft Entra tenant, which is appropriate for an enterprise application.
   3. In the Redirect URI section, select Web and enter the following URL as web callback URL (or redirect URL):
      • https://vertexaisearch.cloud.google.com/oauth-redirect
   4. Click Register. Microsoft Entra creates your app and displays it on the All applications page.

Create an OAuth 2.0 configuration

To create a connection using the OAuth 2.0 authentication method, obtain a client ID, client secret, and tenant ID from your Microsoft Entra application registration page by following these steps.

Obtain client ID and client secret

To obtain the client ID and secret for the app, do the following:

1. Navigate to Microsoft Entra admin center.
2. In the menu, expand the Entra ID section and select App registrations.
3. On the App registrations page, select All applications.
4. Open the application you created.
5. On the app page, select Certificates & secrets.
6. Click add New client secret.
7. In the Add a client secret dialog:
   1. Enter a description for the secret.

      

      Add a client secret dialog

   2. Select an expiry duration. We recommend selecting the default value.
   3. Click Add.
8. Copy the secret from the Value column (Client Secret) and the identifier from the Secret ID column (Client ID), and store them securely for later use.

Obtain tenant ID

Your tenant ID can be found in the Tenant ID box on the overview page in the Microsoft Entra admin center.

Get the tenant ID

Configure the Microsoft Graph permissions

To configure the required Microsoft Graph permissions for the app, do the following:

1. Navigate to Microsoft Entra admin center.
2. In the navigation menu, expand the Entra ID section and select App registrations.
3. On the App registrations page, select All applications.
4. Open the application you created.
5. On the app page, select API permissions.
6. Click Add a permission.
7. In the Request API permissions page, select Microsoft Graph, and select Delegated permissions.

8. Search for and select the following permissions for your connection mode:

   Connection mode	Permission	Permission type	Purpose
   Federated search	Chat.Read	Delegated	Allows the app to read all chats.
   	Chat.ReadBasic	Delegated	Allows the app to read basic properties of chats.
   	ChatMessage.Read	Delegated	Allows the app to read all one-to-one and group chats messages.
   Federated search and actions	Chat.Read	Delegated	Allows the app to read all chats.
   	Chat.ReadBasic	Delegated	Allows the app to read basic properties of chats.
   	ChatMessage.Read	Delegated	Allows the app to read all one-to-one and group chats messages.
   	ChannelMessage.Send	Delegated	Allows the app to send messages in any channel.
   	ChatMessage.Send	Delegated	Allows the app to send chat messages.

   Note: If you only intend to use the data store for search and not to perform any actions that modify content in Microsoft Teams, you can limit the scope to the Read.All permissions. Other permissions are required for actions that involve updating content in Microsoft Teams.

9. Click Add Permissions.