I’ve recently deployed an M365 backup from Commvault Cloud. I would like to understand why Teams backup requires a Microsoft API Delegated Permissions and why can’t Microsoft API Application Permissions instead.
Teams Microsoft API Delegated Permissions
![Contributor 10 Badge](https://uploads-eu-west-1.insided.com/commvault-eu/attachment/e62b9d25-0ae9-470b-a781-1d32a9f042b4_thumb.png)
Hi
The Commvault cloud require certain API permissions to setup and backup Teams on the Metallic/SaaS platform.
Please refer the below article link with details on which permissions are needed and why:
https://documentation.metallic.io/metallic/application_permissions_for_azure_app_for_teams.html
This contains the information on both “Microsoft Graph API Application Permissions” and “Microsoft Graph API Delegated Permissions”
![Contributor 1 Badge](https://uploads-eu-west-1.insided.com/commvault-eu/attachment/4829f3c4-ae47-49ea-be52-8a8643d02f44_thumb.png)
Hello
With Teams we require an dedicated account is because, with Teams we do an Token based Authentication with Delegated access, which actually requires an User Account for the Token authorization to the Teams Application to happen, while Exchange, Sharepoint and OneDrive we don’t use Token based authentication, but just an App only permission which doesn’t require the User Account as the first Authorization is being done or completed.
Adding an MSFT Documentation with the Auth Concepts for your reference: https://learn.microsoft.com/en-us/graph/auth/auth-concepts
Hope this helps out on why for Teams we require an User Account, Let me know if any questions, thank you!
BR,
Arvind, SaaS Advanced Engineer
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.