Prerequisites
The connector should already be set up, with a Connector Profile and a Linked Account. See Getting Started on the Microsoft Teams connector page.Select the Authentication Method
Microsoft Graph supports tenant-wide change notification subscriptions only for applications acting with their own identity, so webhook events require app-only access. The standard OAuth 2.0 method signs in as a user and cannot create these subscriptions, regardless of which permissions the app registration holds.
Choose OAuth 2.0 (Client Credentials)
In your connector profile, select OAuth 2.0 (Client Credentials) as the authentication method before connecting the account. You will be asked for the Directory (tenant) ID, Application (client) ID, and Client Secret from your Azure app registration rather than being redirected to a Microsoft sign-in page.
Connect a Separate Account If Needed
The authentication method is fixed when an account is connected and cannot be changed afterwards. If you already have an account connected with the standard OAuth 2.0 method for actions that read chats, user profiles, or other user-specific data, connect a second account using Client Credentials for webhook events.
Prerequisites
StackOne automatically creates and manages Microsoft Graph subscriptions on your behalf. To receive webhook events, your Azure app registration must have the correct API permissions granted as Application permissions. Delegated permissions of the same name do not apply to app-only access.
Verify API Permissions
Sign in to the Microsoft Entra admin center and navigate to your app registration. Under API permissions, confirm the following Application permissions are granted and admin-consented.
- ChannelMessage.Read.All — Required for channel message events (created, updated, deleted).
- Chat.Read.All — Required for chat message events (created, updated, deleted) and chat member events.
- Team.ReadBasic.All — Required for team events (created, updated, deleted).
- Channel.ReadBasic.All — Required for channel events (created, updated, deleted).
- ChatMember.Read.All — Required for chat member events (added, updated, removed).
Grant Admin Consent
After adding the permissions, click Grant admin consent for [tenant name] and select Yes. Verify that Granted for [tenant name] appears under the Status column for each permission.
Available Webhook Events
When you enable webhook events for Microsoft Teams, StackOne subscribes to Microsoft Graph change notifications. Each event covers all change types for its resource, and the event type on each delivered event is the Microsoft Graph change type (created, updated, or deleted). Only events you select in StackOne are delivered to your application.
Channel Message
Fired when a message is posted, edited, or deleted in a Teams channel. Subscribes to /teams/getAllMessages.
created— A new message is posted in a Teams channel.updated— A message is edited in a Teams channel.deleted— A message is deleted from a Teams channel.
Chat Message
Fired when a message is sent, edited, or deleted in a 1:1 or group chat. Subscribes to /chats/getAllMessages.
created— A new 1:1 or group chat message is sent.updated— A 1:1 or group chat message is edited.deleted— A 1:1 or group chat message is deleted.
Team
Fired when a team is created, updated, or deleted. Subscribes to /teams.
created— A new team is created.updated— A team’s properties are updated.deleted— A team is deleted.
Channel
Fired when a channel is created, updated, or deleted in any team. Subscribes to /teams/getAllChannels.
created— A new channel is created in any team.updated— A channel’s properties are updated.deleted— A channel is deleted.
Chat Member
Fired when a member is added to or removed from a 1:1 or group chat. Subscribes to /chats/getAllMembers.
created— A member is added to any 1:1 or group chat.deleted— A member is removed from any 1:1 or group chat.