How to Activate Access to Microsoft Graph Teams Export APIs
This article documents how to configure your app registration to access the Microsoft Graph Export API for Teams, which is necessary to enable Veeam Backup for Microsoft 365 6a and newer to protect Teams public channel posts. Once the Teams Protected APIs are accessible and Veeam Backup for Microsoft 365 6a or later is installed, follow the steps in KB4340 to enable the use of those APIs.
As of 25 August 2025, the Teams Export API is available free of charge. After assigning the necessary permissions to your app registration and enabling this functionality in Veeam Backup for Microsoft 365, no further action is needed.
Purpose
Veeam Backup for Microsoft 365 6a and later provides an option to leverage the Microsoft Graph Export API for Teams to back up Teams public channel posts.
Support for Microsoft Graph Export API for Teams was implemented in Veeam Backup for Microsoft 365 6a and later because Microsoft deprecated the ability for EWS APIs to access the TeamsMessagesData folder.
By default, Veeam Backup for Microsoft 365 7.0 and previous versions will attempt to utilize EWS APIs to protect the TeamsMessagesData folder. However, as Microsoft has now deprecated EWS API access to the TeamsMessagesData folder, the only way to back up Teams public channel posts will be to configure Veeam Backup for Microsoft 365 to utilize the Teams Export APIs.
Important Notes:
- Additional steps must be performed to protect Teams public channel posts, and then the Teams backup must be explicitly enabled.
Utilizing the Microsoft Graph Export API for Teams comes at an additional cost from Microsoft.
As of August 25th, 2025 (2025-08-25), the Teams APIs are no longer metered, and no billing configuration is required to use these APIs.- The Microsoft Graph Export API for Teams is currently not supported in the Microsoft 365 US Government region or the China region.
Solution
Step 1: Register App
When adding an organization with modern authentication to Veeam Backup for Microsoft 365, after following the login prompts, you will end up with an app registration. You will need information about this app registration to request Protected API access in the next section.
- Log into portal.azure.com and select Microsoft Entra ID.
If your account has access to more than one directory, ensure you have selected the relevant one. - Within the Basic information section, gather the Tenant ID.
- In the Veeam Backup for Microsoft 365 Console, right-click the Organization and select 'Edit organization'. Gather the Application ID.
- Under App Registrations in Microsoft Entra ID, review the API permissions assigned to the app registration used.
Ensure that the application permission for Microsoft Graph for ChannelMessage.Read.All is assigned.
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Thank you!
Your feedback has been received and will be reviewed.
Oops! Something went wrong.
Please, try again later.