Symptom
While integrating the MS Teams app you notice that it requires a permission of Type "Application". This type of permission opens the app to your whole network instead of only to the Teams assigned to the logged-in users from Service Cloud.
Environment
SAP Cloud for Customer
Cause
The app is using the application level permission to avoid the "Consent" flow for each and every user.
Resolution
You can create a subgroup and add users to it. Then you can provide permissions to the groups that are using the same app. This way, only the administrator has to maintain these permissions and all users in that organisation can use the same app, instead of having every user consent before using the app.
Keywords
Microsoft Teams; MS Teams; app; security; type application; permission; subgroup; , KBA , LOD-CRM-TMS , Microsoft Teams Collaboration Channel , How To