Read and understand the permissions request for the integration
Learn about the permissions required to integrate LearnUpon with Microsoft Teams. See MS Teams: set up or remove MS Teams, admin view for step-by-step instructions.
Availability: all customers
Permissions request during setup
When a Microsoft Global Admin sets up MS Teams as an integration in LearnUpon, the admin must agree to the permissions request from LearnUpon, on behalf of the admin's organization.
LearnUpon requires certain permissions to access data, to make the integration work.
The permissions request reads:
- Sign you in and read your profile
- Read and create your online meetings
- Maintain access to data you have given it access to
The following screenshot shows the permissions request during initial setup.
Read and create online meetings: in detail
These permissions are also called read/write permissions.
The LearnUpon application creates, updates, adds learners to, and deletes ILT sessions using MS Teams on the customer's behalf.
To perform these tasks, LearnUpon requires write permission to the Microsoft Graph API.
To fetch these online meetings created through LearnUpon, LearnUpon requires read access to this API.
LearnUpon only accesses online meetings created by LearnUpon. Any meetings the customer creates outside the LearnUpon portal are not accessible. LearnUpon doesn't have access to meeting IDs for these meetings, and reading other meetings data exceeds the intent of the integration.
See Microsoft Graph API documentation about online meeting permissions. LearnUpon isn't responsible for content outside this website.
Data shared between MS Teams and LearnUpon
LearnUpon provides customers with a capacity to integrate with MS Teams.
The data that customers send to MS Teams via LearnUpon is governed by the agreement that customers have with MS Teams, when they sign up for Microsoft services. LearnUpon can only access data that customers have agreed to share with Microsoft.
On LearnUpon's side: LearnUpon securely stores the authentication token required to allow the connection between LearnUpon and Microsoft. The Microsoft Global Admin on the customer side generates this token, when they set up the integration with LearnUpon.
When an admin or instructor sets up an MS Teams webinar in LearnUpon, the instructor and attendee email addresses are shared with MS Teams as well as the webinar data, like webinar name, start time and link.
When a LearnUpon user accesses a webinar with MS Teams, Microsoft shares only the data required to make the webinar happen, namely user details and enrollment data.
An overview of application security is available from the LearnUpon website.
Removing the MS Global Admin account: effects on the integration
If your organization removes the Microsoft Global Admin account from your portal, other MS Teams integration accounts that create sessions will continue to work.
See: