Whitelisting the Microsoft Teams Bot App

In order to complete the steps below, you must have Global Administrator or Teams Service Administrator role.

The same Bot can be whitelisted in multiple Azure tenants, and can be used for multiple compliance policies.

The registration consists of the following steps:

Accessing the tenant via PowerShell

Separate Azure tenants for the recording provider (bot) and for the Teams environment to record

In the case when the recorded Teams environment and the recording bot are in separate Azure tenants, the following steps have to be done in the Teams tenant.

Step 1 - Download and install the Skype Bus Connector PowerShell module.

Step 2 - Open PowerShell as administrator.

Step 3 - Execute the following commands one by one:

Import-Module SkypeOnlineConnector

$userCredential = get-Credential

Step 4 - A login prompt will show up. Provide the user credentials.

Step 5 - Execute the following commands one by one:

$teamsSession = New-CsOnlineSession -Credential $userCredential -Verbose

Import-PSSession $teamsSession

Registering the bot as a Teams application

Step 6 - Execute the following command. At the <UPN> part, provide a unique UPN for the recording bot, for example, verbabot@contoso.com. Provide something at the <displayName> part, it can be anything. Replace the <botAppId> part with the application ID from the previous section (Creating the Microsoft Teams Recording Bot - Step 13).

New-CsOnlineApplicationInstance -UserPrincipalname <UPN> -DisplayName '<displayName>' -ApplicationId <botAppId>

Step 7 - In the command results, take note of the ObjectId. It will be needed later.

Step 8 - Execute the following command. Replace the <ObjectId> part with the ID from the results of the previous command.

Sync-CsOnlineApplicationInstance -ObjectId <ObjectId>

Step 9 (Optional - 2N recording) - If 2N recording will be configured, then repeat the steps 6-8 for the second bot registration also. Take a note of the second ObjectId.