incident.io for Microsoft Teams requests three sets of permissions:
Global permissions: these give us access to resources across your Microsoft tenant.
Team-specific permissions: these allow us to manage the 'Incidents' team where the incident.io bot is installed.
Install and upgrade permissions: optionally, these permissions allow us to automate setting up incident.io in your Microsoft account.
Global permissions
Before you can install the incident.io app to Microsoft Teams, we first need access to view information about your Microsoft tenant.
The permissions here are for app-only access, and allow us to perform certain operations against Microsoft's API without a user being present. This is called app-only access. When you sign up for incident.io, or when we need to add new permissions, you'll have to go through the admin consent process.
Permission | Description | Purpose |
| See the name and logo configured in your Microsoft tenant | This lets us show your logo in the incident.io dashboard |
| View a list of all users in your Microsoft tenant | We use this to add users to Catalog |
| Install the incident.io bot to users in your account | This allows us to send Chats and Activities to users across your Microsoft tenant. We use this to notify people when they are assigned a role or action for example. |
| Create chats within Microsoft Teams | We use this to create group chats for private incidents. |
| Install the incident.io bot to chats in your account | We use this so that we can install the incident.io app into the chats that we create. |
Team-specific permissions
When you install the incident.io app for Microsoft Teams, we'll gain additional access to the Team the app is installed to, but not other Teams or Chats within your Microsoft tenant.
Note: these permissions only apply inside the Team that the incident.io app is installed to. No access is granted to other Teams in your account.
Permissions | Description | Purpose |
Channel.Create.Group ChannelSettings.ReadWrite.Group | Create, rename, archive and delete channels | Create a channel for each incident, and keep its name in sync with the incident's name. |
ChannelMessage.Read.Group | View messages posted to public channels where the incident.io app is installed (excluding private or shared channels) |
|
TeamsTab.Create.Group TeamsTab.ReadWrite.Group | View, create, and update tabs in channels within the Team |
|
TeamSettings.Read.Group TeamSettings.ReadWrite.Group | View and change settings for the Team | Allows us to view & update the name and description of the incidents team |
TeamsAppInstallation.Read.Group | View apps installed to the Team | Check which version of the incident.io app is installed. |
Chat-specific permissions
When we create a chat and install the incident.io app for Microsoft Teams into it, we'll gain additional access to the chat we created, but not other Teams or Chats within your Microsoft tenant.
Note: these permissions only apply inside the chat that the incident.io app is installed to. No access is granted to other chats in your account.
Permissions | Description | Purpose |
ChatSettings.ReadWrite.Chat | Update the topic of chats | Keep the topic of an incident's chat in sync with the incident's name. |
TeamsTab.ReadWrite.Chat | View, create, and update tabs in chats | Add the incident.io tab to each incident channel |
Chat.Manage.Chat | Add and remove members in chats |
|
Install & upgrade permissions
These permissions allow us to create the Incidents Team and install the incident.io app to it on your behalf.
We only ask for these permissions for one hour at a time, after which we won't be able to use these permissions without your explicit consent.
Permission | Description | Purpose |
Team.Create | Create a team | Create the 'Incidents' team, where incident channels will created. |
TeamsAppInstallation.ReadWriteAndConsentForTeam | Install an app to a Team, and grant it permissions within that Team | Install or upgrade the incident.io app within the 'Incidents' team. |
💡 If you would prefer not to grant us these permissions, you can take these actions manually from within Microsoft Teams. Please get in touch and we'll help you get set up manually.