Approve Microsoft 365 access (optional)

Owned by Tobias Viehweger
Last updated: Jun 29, 2021 by Tamara Braun
2 min read

Overview

For some companies, access to Microsoft 365 / Microsoft Teams resources is restricted. If you can’t login from Jira or Microsoft Teams, your Microsoft 365 administrator might need to consent to the app for you.

In case you are interested in the exact permissions and why we need them, please check out this dedicated permissions article.

Approving access for all users

To approve access of the app for all users, please send your Microsoft 365 administrator the following link:

--- Short link https://go.yasoon.com/products/tfj/teams-admin-consent

Your admin will see the following screen to confirm individual permissions required by the app.

Please note: Despite of what the screen says in the subtext, we won’t get access to all user resources after approving them. Before we get access to any Microsoft Teams data, the users will need to log in with their own account, as well from Jira.

 

Approving access for a limited set of users

In case you only want to approve the access for a limited set of users, e.g. you already have a dedicated AzureAD group for Jira users, please follow the steps below.

Usually, when approving the app for the first time, it’ll create a “service principal / enterprise application” in your AzureAD tenant. You can check if you already have an enterprise app by checking this page (search for Teams):

https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/AllApps/menuId/

If you don’t have an entry for our Teams app yet, you’ll need to use Powershell to create it manually.

# Install Powershell module for Azure (if you don't have it yet) Install-Module AzureAD # Connect to Azure interactively Connect-AzureAD -Confirm # Create the new service principal New-AzureADServicePrincipal -AppId 89d5ca9f-d63b-4885-bd30-6e7433c1540c -Tags {WindowsAzureActiveDirectoryIntegratedApp}

Afterwards, you should be able to find the enterprise app in the UI linked above, where you can restrict the application to certain users or groups, or, using the “Properties” page, allow users to self-approve the app: