502842 – Microsoft Teams: Permission and Privilege level of Apps and Agents

Product:

Microsoft 365 admin center, Teams

Platform:

US Instances, Web, World tenant

Status:

Rolling out

Change type:

Links:

MC1164379

Details:

Today, IT admins in the Teams admin center can view the permissions requested by an app or agent—these permissions define what organizational data the app can access. This feature enhances that experience by showing the risk rating of each permission and the overall privilege level of the app or agent, helping admins better secure organizational data and make faster, more informed approval decisions.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-09-09

updated:
2025-10-22

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Imagine you're the gatekeeper of a large office building. Each person or service that wants to enter the building needs to show you a pass that indicates where they can go and what they can do inside. Some might only have access to the lobby, while others might be allowed into more sensitive areas like the finance department or the CEO's office. Your job is to make sure that only those with the right permissions can access certain areas, ensuring the safety and security of the building.

In the world of Microsoft Teams, IT admins play a similar role. They are responsible for managing which apps or agents can access organizational data. Just like the passes in our office analogy, each app or agent requests certain permissions that define what data they can access within the organization.

With the new feature in the Teams admin center, IT admins can now see not only the permissions requested by an app or agent but also the risk rating associated with each permission. This is akin to seeing a risk assessment on each pass, indicating how much of a security concern it might be to allow that access. Additionally, admins can view the overall privilege level of the app or agent, which is like understanding the overall trustworthiness of the person or service entering the building.

This enhanced visibility helps IT admins make quicker and more informed decisions about whether to approve or deny access. By understanding the potential risks and privilege levels, they can better protect organizational data, much like a gatekeeper ensuring the security of the building by carefully monitoring who gets access to which areas.