Microsoft 365 Teams

Microsoft Teams Management

Overview

Microsoft Teams is the collaboration hub for most M365 customers. MSP support tasks include troubleshooting access issues, managing team membership, reviewing channel structure, and investigating meeting problems. All Teams data is accessible through Microsoft Graph.

Core Teams Objects

| Object | Description | API Resource | |--------|-------------|-------------| | Team | Top-level workspace | /teams/{id} | | Channel | Conversation thread within a team | /teams/{id}/channels/{id} | | Member | User in a team (owner or member) | /teams/{id}/members | | Meeting | Online meeting or channel event | /me/onlineMeetings | | Tab | App integration in a channel | /teams/{id}/channels/{id}/tabs |

Graph API Patterns

List All Teams a User Belongs To

GET /v1.0/users/{userId}/joinedTeams?$select=id,displayName,description,visibility

Response:

{
  "value": [
    {
      "id": "team-guid",
      "displayName": "Engineering",
      "description": "Engineering team workspace",
      "visibility": "private"
    }
  ]
}

List All Teams in the Tenant (Admin View)

GET /v1.0/groups?$filter=resourceProvisioningOptions/Any(x:x eq 'Team')&$select=id,displayName,description,createdDateTime,visibility

Get Team Details

GET /v1.0/teams/{teamId}?$select=id,displayName,description,isArchived,memberSettings,guestSettings,messagingSettings

List Channels in a Team

GET /v1.0/teams/{teamId}/channels?$select=id,displayName,description,membershipType,createdDateTime

Channel types:

• standard — Open to all team members
• private — Invite-only subset of team members
• shared — Shared with external users or other teams

Get Team Members

GET /v1.0/teams/{teamId}/members?$select=id,displayName,email,roles

Roles: owner or member (empty array = member)

Add a Member to a Team

POST /v1.0/teams/{teamId}/members
Content-Type: application/json

{
  "@odata.type": "#microsoft.graph.aadUserConversationMember",
  "roles": [],
  "user@odata.bind": "https://graph.microsoft.com/v1.0/users/{userId}"
}

To add as owner: set "roles": ["owner"]

Remove a Member from a Team

DELETE /v1.0/teams/{teamId}/members/{memberId}

Create a New Team

POST /v1.0/teams
Content-Type: application/json

{
  "template@odata.bind": "https://graph.microsoft.com/v1.0/teamsTemplates('standard')",
  "displayName": "IT Support",
  "description": "Internal IT support team",
  "visibility": "private",
  "members": [
    {
      "@odata.type": "#microsoft.graph.aadUserConversationMember",
      "roles": ["owner"],
      "user@odata.bind": "https://graph.microsoft.com/v1.0/users/{ownerUserId}"
    }
  ]
}

Archive a Team (Inactive Projects)

POST /v1.0/teams/{teamId}/archive
Content-Type: application/json

{
  "shouldSetSpoSiteReadOnlyForMembers": true
}

Get Channel Messages (Last 20)

GET /v1.0/teams/{teamId}/channels/{channelId}/messages?$top=20&$orderby=createdDateTime desc

Teams Meetings

Get a User's Upcoming Meetings

GET /v1.0/users/{userId}/calendar/events?$filter=start/dateTime ge '2024-01-15T00:00:00' and isOnlineMeeting eq true&$select=subject,start,end,organizer,onlineMeeting&$orderby=start/dateTime

Get Online Meeting Details (Join URL)

GET /v1.0/users/{userId}/onlineMeetings/{meetingId}?$select=subject,startDateTime,endDateTime,joinUrl,participants

Create an Online Meeting

POST /v1.0/users/{userId}/onlineMeetings
Content-Type: application/json

{
  "startDateTime": "2024-01-20T14:00:00Z",
  "endDateTime": "2024-01-20T15:00:00Z",
  "subject": "IT Onboarding Session"
}

Common MSP Workflows

New Employee Teams Onboarding

1. Get list of teams the employee's manager belongs to
2. Add new user to relevant teams as member
3. Add to department-specific private channels
4. Add as member (not owner) unless explicitly needed

Employee Offboarding from Teams

1. List all teams user belongs to (/joinedTeams)
2. For each team: check if user is the sole owner
3. If sole owner: assign another owner before removal
4. Remove user from all teams
5. Archive any teams that were personal/project-specific

Find Teams Without Owners

GET /v1.0/groups?$filter=resourceProvisioningOptions/Any(x:x eq 'Team')&$select=id,displayName

Then for each team:

GET /v1.0/teams/{teamId}/members?$filter=roles/any(r:r eq 'owner')

Empty result = orphaned team, security risk.

Teams Guest Access Audit

List teams with external members:

GET /v1.0/teams/{teamId}/members?$filter=startsWith(email,'#EXT#')

External accounts have #EXT# in their UPN pattern.

Troubleshooting Teams Access

| Symptom | Check | Resolution | |---------|-------|------------| | Can't join a team | Check visibility (private requires invite) | Add via API or admin invite | | Missing from channel | Private channel membership | Add to private channel specifically | | Can't see messages | Guest/external user restrictions | Review guest settings in team | | Meeting join fails | License (Teams not in SKU) | Assign Teams service plan | | Missing in directory | Not synced from AD | Check Azure AD Connect sync |

Permissions Required

| Task | Microsoft Graph Permission | |------|---------------------------| | List joined teams | Team.ReadBasic.All | | List all tenant teams | Directory.Read.All | | Read team members | TeamMember.Read.All | | Add/remove members | TeamMember.ReadWrite.All | | Create teams | Team.Create | | Archive teams | TeamSettings.ReadWrite.All | | Read messages | ChannelMessage.Read.All |

Related Skills

• [M365 Users](../users/SKILL.md) - User accounts, license verification
• [M365 Calendar](../calendar/SKILL.md) - Meeting scheduling and calendar integration
• [M365 API Patterns](../api-patterns/SKILL.md) - Auth, pagination, delta queries