Enabling Graph API Permissions using SSO App for Group Mailbox Flow

Enabling Graph API Permissions

REGISTER APP IN AZURE AD To allow the bot to perform automations for your end-user, we need to enable certain Graph API(s). We will guide you through how to do this in Azure AD. ENABLE GRAPH API Graph API Permissions Required for basic MS Teams automation

1. Team.ReadBasic.All
2. TeamMember.ReadWrite.All
3. Directory.Read.All
4. User.ReadWrite.All
5. Group.Create
6. Group.ReadWrite.All
7. GroupMember.Read.All
8. GroupMember.ReadWrite.All TYPE OF PERMISSIONS REQUIRED

1. Application permissions Instructions Part A

1. Open your Azure Portal

2. Click on the View button for Manage Azure Active Directory

3. Click on App Registration

4. Search and Open the Rezolve SSO application you created

5. The App Overview page will open, look for Api Permissions in the left hand side menu and click on it

6. Select Add a Permission on the main part of the page

9. Select Microsoft Graph Teams and click Register

14. Click on Application Permission option

17. Type Team in the search box, select Team.ReadBasic.All and click Add Permissions

19. Click Add a Permission > Microsoft Graph > 12. Click Add a Permission > Microsoft Graph > Application permissions again Application permissions again

20. Type Team in the search box, this time select 13. Type direct in the search box, this time select TeamMember.ReadWrite.All and click Add Directory.Read.All and click Add Permissions Permissions •

• 1 1. 14. Repeat Application permissions again and search and• ad d the additional permissions • User.ReadWrite.All • Group.Create • Group.ReadWrite.All • GroupMember.Read.All • GroupMember.ReadWrite.All 12.

15. Close the Request API Permissions box so you are back at the Configure premissions screen
16. Select Grant admin consent for …

18.1 7. Click Yes to Grant admin consent confirmation 13. 18. Confirm that the screen looks similar to below with your listed permissions, Admin Consent Req set to Yes and Granted for has a green check 14. 15.

Instructions Part B

1. Look for Certificates & secrets in the left hand side menu and select it

2. Then select New client secret on the main part of the page

3. Enter a description i.e. RezolveAIBot and click Add

5. Copy the Value and Secret ID and save them somewhere

6. Select Overview in the left hand side menu Copy the Application (client) ID and save with Client Secret ID This documen7t .c onSteaninds ptrhoep riAetpapryl iicnfaortmioant io(cn loiewnnte)d I Dby, CRelizeonlvte .Saei acnred tm IDus ta nnodt the t h e downloaded Manifest to Rezolve be distributed outside without authorization. 11501 Dublin Blvd STE 200, Dublin, CA 94568 info@rezolve.ai | www.rezolve.ai

7. Select Manifest in the left hand side menu

8. Click on Download

9. Send the Application (client) ID, Client Secret ID and the downloaded Manifest to Rezolve