How to Activate Access to Microsoft Graph Teams Export APIs
This article documents how to link your Azure subscription to your app registration for billing to access Microsoft Graph Export API for Teams. This is needed to enable Veeam Backup for Microsoft 365 6a and newer to utilize that API to protect Teams public channel posts.
After the Teams Protected APIs are accessed and Veeam Backup for Microsoft 365 6a or later is installed, follow the steps in KB4340 to enable the use of those APIs.
Purpose
Veeam Backup for Microsoft 365 6a and later provides an option to leverage Microsoft Graph Export API for Teams to back up Teams public channel posts.
Support for Microsoft Graph Export API for Teams was implemented in Veeam Backup for Microsoft 365 6a and later because Microsoft deprecated the ability for EWS APIs to access the TeamsMessagesData folder.
By default, Veeam Backup for Microsoft 365 7.0 and previous versions will attempt to utilize EWS APIs to protect the TeamsMessagsesData folder. However, as Microsoft has now deprecated EWS API access to the TeamsMessagesData folder, the only way to backup Teams public channel posts will be to configure Veeam Backup for Microsoft 365 to utilize the Teams Export APIs.
Important Notes:
- To protect Teams public channel posts, additional steps must be performed, and then the Teams backup must be explicitly enabled.
- Utilizing the Microsoft Graph Export API for Teams comes at an additional cost from Microsoft.Veeam Backup for Microsoft 365 6a's API request will be considered as "model=B"
- The Microsoft Graph Export API for Teams is currently not supported in Microsoft 365 US Government, Germany, and China regions.
Solution
Step 1: Register App
When adding an organization with modern authentication to Veeam Backup for Microsoft 365, after following the login prompts, you will end up with an app registration. You will need information about this app registration to request Protected API access in the next section.
- Log into portal.azure.com and select Azure Active Directory.
If your account has access to more than one directory, ensure you have selected the relevant one. - Under Azure Active Directory overview, gather the Tenant ID.
- In the Veeam Backup for Microsoft 365 Console, right-click the Organization and select 'Edit organization'. Gather the Application ID.
- Under App Registrations in Azure AD, review the API permissions assigned to the app registration used.
Ensure that the Microsoft Graph Application permission to ChannelMessage.Read.All is assigned.
Step 2: Associate Subscription with App Registration for Billing
Ensure that your subscription is associated with the app registration for billing purposes.
If the app registration is not linked with a valid billable subscription, Microsoft Teams Export API access will fail with the following error:
Failed to process team: <Team Name>. To call this API, the app must be associated with an Azure subscription, see https://aka.ms/teams-api-payment-requirements for details.. The remote server returned an error: (402) Payment Required
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Thank you!
Your feedback has been received and will be reviewed.