Hello team, We are creating a bot/App (Manifest) in MS teams in our Microsoft tenant. Post that we are registering it in App Registrations in Portal.azure.com When we create the bot using Admin Privileges (User account used to create the BOT has Global Admin and Teams Admin Role), it is working fine. When we create the bot using user access (NO ADMIN ROLES). its not working. Error : :: Authorization is denied for this request. :: AppisBlockedByAppPermissionPolicy. We have checked the permission policy. and everything seems to be fine. any Suggestions ? Note: Do we absolutely need to create the BOT with Admin Privileges ? If yes, which admin roles are required ? Any supporting Documents ? Regards, Rangan Dawn

Bot Created in MS Teams SDK is not working

Rangan Dawn 0

Hello team,

We are creating a bot/App (Manifest) in MS teams in our Microsoft tenant. Post that we are registering it in App Registrations in Portal.azure.com

When we create the bot using Admin Privileges (User account used to create the BOT has Global Admin and Teams Admin Role), it is working fine.
When we create the bot using user access (NO ADMIN ROLES). its not working.
Error :
:: Authorization is denied for this request.
:: AppisBlockedByAppPermissionPolicy.

We have checked the permission policy. and everything seems to be fine.

any Suggestions ?

Note: Do we absolutely need to create the BOT with Admin Privileges ? If yes, which admin roles are required ? Any supporting Documents ?

Regards,
Rangan Dawn

Vaibhav-MSFT 15 Reputation points Microsoft Vendor

2024-03-27T05:07:42.2933333+00:00

Hello Rangan Dawn,
For creating a bot in Azure Portal requires Contributor access either in the subscription or in a specific resource group. A user in the Contributor role for a subscription can create a bot in a new or existing resource group.
Refer the documentation-
https://learn.microsoft.com/en-us/azure/bot-service/bot-service-resources-faq-security?view=azure-bot-service-4.0#which-rbac-role-is-required-to-create-and-deploy-a-bot
https://learn.microsoft.com/en-us/azure/role-based-access-control/overview
Rangan Dawn 0 Reputation points

2024-03-27T06:13:33.39+00:00

Hi Vaibhav,
Thanks for the suggestion. Even we were going through the same Document. This is really helpful, if we create the Bot in Azure Subscription (using Azure AI Bot Service).

But in this scenario, we are trying from MS Teams SDK (Developer portal in MS Teams) or Teams tool Kit Visual Studio code.

Thats where we are facing the issue, i have described in the post.
Vaibhav-MSFT 15 Reputation points Microsoft Vendor

2024-03-28T13:25:32.89+00:00

Can you share video repro steps so that we can try it from our end?