Configuration guide

Microsoft Teams

Access messages and files from Microsoft Teams

Before you begin

Availability depends on your school's enabled tools, provider setup, and account permissions. These settings are managed in the web workspace. A class policy may restrict a feature described here.

How it works#

The Teams connector will go through all requested sites belonging to an organization and index all the files available to that site.

Setting up#

Authorization#

Open Azure Portal#

Create app registration#

Navigate to "app registrations" using the search bar. Click New Registration. Name it something like "Nexus Teams Connector", leave everything else as default, and click Register.

Copy IDs#

Under "Essentials" in the overview tab, copy the client ID and Directory ID and paste into the Nexus connector later.

Create client secret#

Navigate to the "Certificates & secrets" tab in Azure Portal and click New client secret. Fill out the description, set the expiration to 24 months, and click Add. Copy the secret value in the Value column.

Add API permissions#

Navigate to the "API Permissions" tab and click Add a permission. Click Microsoft Graph > Application permissions. Add:

Team.ReadBasic.All (Team)
TeamSettings.ReadWrite.All (TeamsSettings)
Channel.ReadBasic.All (Channel)
ChannelSettings.ReadWrite.All (ChannelSettings)
ChannelMessage.Read.All (ChannelMessage)
ChannelMember.Read.All (ChannelMember) Click Add permissions, then click Grant admin consent for <Organization name> and Confirm.

Indexing#

Open Teams connector#

Navigate to the Admin Panel and select the Teams Connector Tile.

Enter credentials#

Provide the Application (client) ID, Directory (tenant) ID and Client Secret Value from steps above.

Select teams and connect#

Select a list of teams to pull from or leave blank and click Connect to pull everything.

Before using this source with students#

Start with approved course material. Check which documents the connector can retrieve and how it maps source permissions. Test with a student account and a teacher account before widening access. A successful sync does not prove that the intended class boundary is correct.

Use source troubleshooting when a document is missing or visible to the wrong audience.