Skip to content
11:11 Systems
Rethink Connected
11:11 Systems11:11 Systems
  • Why 11:11
    • Submenu
      • Column 1
        • Cloud Console
          Cloud Console
          Compliance
          Compliance

      • Column 2
        • Global Regions
          Cloud Regions
          Catalyst
          Planning and Assessment

      • WHY CHOOSE 11:11
      • Overview
      • Leadership
      • News & Media
      •  
      • Careers
      • Technology Partners
      • Customer Stories
  • Products & Services
    • Products & Services
      • CLOUD
      • Cloud Overview
      • Public Cloud
      • Private Cloud
      • Object Storage
      • Cloud Labs
      • Colocation/Bare-Metal
      • BACKUP
      • Backup Overview
      • Veeam Backup
      • Microsoft 365 Backup
      • Managed Backup for Cohesity
      • DISASTER RECOVERY
      • DRaaS Overview
      • DRaaS for Veeam
      • DRaaS for Zerto
      • DRaaS for Azure
      • Autopilot
      • SECURITY
      • Security Overview
      • Continuous Risk Scanning
      • Managed SIEM
      • Managed EDR
      • Managed Firewall
      • CONNECTIVITY
      • Connectivity Overview
      • SD-WAN
      • Multi-Cloud Connect
      • Managed IP
  • Solutions
    • Solutions Submenu
      • INDUSTRY
      • Education
      • Financial
      • Government
      • Healthcare
  • Partners
    • Partners Submenu
      • Overview
      • Become a Partner
      • Partner Portals
  • Resources
    • Resources Submenu
      • Events
      • Webinars
      • News & Media
      • White Papers
      • Podcast
      • Data Sheets
      • Customer Stories
      • Innovation Blog
  • Support
    • Support Submenu
      • Contact Support
      • Product Documentation
      • API Documentation
Search:
  • Console Login
  • Contact
Header Right Menu
Free Trial
  • Why 11:11
    • Cloud Console
    • Compliance
    • Cloud Regions
    • Planning and Assessment
    • WHY CHOOSE 11:11
    • Overview
    • Leadership
    • News & Media
    • Careers
    • Technology Partners
    • Customer Stories
    • Blog
  • Products & Services
    • CLOUD
    • Cloud Overview
    • Public Cloud
    • Private Cloud
    • Object Storage
    • Cloud Labs
    • Colocation/Bare-Metal
    • BACKUP
    • Backup Overview
    • Veeam Backup
    • Microsoft 365 Backup
    • Managed Backup for Cohesity
    • DISASTER RECOVERY
    • DRaaS Overview
    • DRaaS for Veeam
    • DRaaS for Zerto
    • DRaaS for Azure
    • Autopilot
    • SECURITY
    • Security Overview
    • Continuous Risk Scanning
    • Managed SIEM
    • Managed EDR
    • Managed Firewall
    • CLOUD CONNECTIVITY
    • Connectivity Overview
    • SD-WAN
    • Multi Cloud Connect
    • Managed IP
  • Solutions
    • INDUSTRY
    • Education
    • Financial
    • Government
    • Healthcare
    • Column 2
  • Partners
    • Overview
    • Become a Partner
    • Partner Portals
  • Resources
    • Events
    • Webinars
    • News & Media
    • Whitepapers
    • Podcast
    • Datasheets
    • Customer Stories
    • Innovation Blog
  • Support
    • Contact Support
    • Success Center
    • API Documentation
  • Contact
  • Console Login
  • Free Trial
Tags: Microsoft TeamsTech tipsMicrosoft 365 BackupVeeam
Author: 11:11 Systems
Date: March 15, 2023

Protecting Microsoft Teams Channel Chat Data: Are You Prepared?

The process (and cost) of backing up your organization’s Microsoft Teams Channel chat data has changed. Ensure your organization is prepared and protected with 11:11 and Veeam Backup for Microsoft 365. 

As Microsoft takes steps to continually improve the security posture of its Microsoft 365 platform, we have seen several changes introduced over the past 12 months. The first was the deprecation of Basic Authentication and now access to certain data types via Exchange Web Services (EWS). These are welcome changes, but do require some consideration when it comes to integration with your backup solution.

For this article we will focus on the changes being made to Exchange Web Service access. Up until recently, backing up your favorite Microsoft 365 services, such as SharePoint Online, OneDrive for Business, Exchange Online, and Microsoft Teams, required you to simply create a backup job for those workload types and call it a day. However, beginning on Feb. 1, 2023, Microsoft has restricted access to data via Exchange Web Services and has made an alternative available, Microsoft Graphs Teams Export API. That is not necessarily a problem, but how to get access to the API — and the cost associated with it — can be.

What Are We Talking About?

Let’s set the scene here: To gain access to the Graph Teams Export API, one must complete a Microsoft Form requesting access. (Fun fact: This form has changed at least four times at time of writing this article.) The second, more crucial, point to consider is that there is a cost associated with using this API, which at time of writing, sits at $0.00075 per message.

Now, I hear you asking: What will this ultimately give me?

The changes implemented by Microsoft on Feb. 1, mean that if you wish to protect chat data, specifically Teams Channel chat data, then each message accessed and protected has an API call cost of $0.00075. That is all the API access and costs associated gives you.

Instant messages in Teams were never protected by Veeam Backup for Microsoft 365. All other features that were previously protected by Veeam Backup for Microsoft 365 continue to be protected, including all other items associated with Microsoft Teams. For a full list of what is and is not protected, check out this Veeam article.

Our advice is that if you do not need to protect Teams Channel Chat data, then do not request access to the Graph Teams Export API at this time.

Cost

However, if you do need to protect Teams Channel chat data, the first question is always: How much is it going to cost? There is no definitive way to gather this information, but we can make some assumptions based on number of Teams messages that exist in the Microsoft 365 organization and the cost of the API call at $0.00075 per message.

To do this, log into the Microsoft 365 admin portal at https://admin.microsoft.com and browse to reports/usage.

Select the Teams report usage.

From here we can see Channel message usage, which is the statistic we are looking for. This example shows none. Yours will be different.

Now multiply the number of channel messages by $0.00075 and you have an estimated cost to backup the messages.

Configuring Access to Graph Teams Export API

The next thing to consider is, of course: How are those API calls going to be paid? A Microsoft 365 license does not cover these API costs. You may have M365 Business Premium, E3, Azure AD P2 bolt on, etc. NONE of these will cover the API license cost. To do so, an Azure subscription is required. There is a good explanation on the differences between Subscriptions and Licenses from Microsoft here.

There are different ways to purchase a subscription for Azure, this could be Pay-As-You-Go backed by a credit card, it may be bundled with an Enterprise License Agreement, or you may purchase it from your Microsoft Cloud Solution Provider alongside your Microsoft 365 licenses. The point is, there are several ways a subscription can exist and that is for you to figure out the most appropriate method to purchase.

Checking Azure Subscriptions

To check if a subscription already exists, log into https://portal.azure.com with an account that has sufficient privileges to managed subscriptions and search for subscriptions.

If a subscription exists, it will be listed here. In this example there are no subscriptions.

Example: Pay-as-You-Go Subscription Creation

Click to add a subscription on the subscription page and choose Pay-As-You-Go.

If a profile has not already been created, you will be asked to create one.

And “agree” to Microsoft agreement.

Next you will be asked for payment details.

And finally, if you would like to bolt on technical support.

 

Once complete a subscription can be created.

Requesting Access to Graph Teams Export API

Once a subscription is in place, request access to the API by using this form: https://aka.ms/teamsgraph/requestaccess.

Please note, this section assumes that a Microsoft 365 organization has been set up with Veeam Backup for Microsoft 365 using Modern Authentication. Please check out our Success Center article for the steps to complete this task. This process creates an Application ID which is required to complete the form.

Complete the form. Steps are correct at time of writing.

  1. Your e-mail address
  2. Publisher name = Veeam Software

  1. Application name = Your Azure Application registration name
  2. Application ID = Your Application ID

Finding Application Name and Application ID

Log into https://portal.azure.com and find Azure Active Directory.

Locate “App Registrations.”

Find the name of the Application and the Application ID. 

  1. Which category best describes your application = Backup / Restore

  1. Why does your application need read access to all messages in the tenant? = To allow for backup/protection of Teams message data
  2. Data Retention = It is obvious to any admin installing this app that it will make a copy of Microsoft Teams messages

  1. What are the tenant ID’s where this application needs to run = Your Tenant ID. See how to below
  2. Does your organisation own all these tenants = For you to answer
  3. May we contact you about your app’s use of non-protected APIs = For you to answer

Finding Tenant ID

Back into https://portal.azure.com navigate to the root of Azure Active Directory. The Tenant Id is displayed here.

  1. I have read and agree to the Terms and Conditions for Licensing and payment requirements that apply to these APIs (Service Specific Terms in the link below) = Yes

Click Submit.

An email like the below will be received once the form has been submitted. It can take up to one week for this form to be processed by Microsoft.

Once Access is Granted to Graph Teams Export API

Please contact 11:11 support who will be more than happy to assist you with enabling Teams Channel chat backups.

Conclusion

Please bookmark this page for future updates. As 11:11 integrates this functionality with its award-winning 11:11 Console, we will enable you to manage the Teams Channel Chat backup functionality yourself.

Categories: Microsoft 365, VeeamBy 11:11 SystemsMarch 15, 2023
Tags: Microsoft TeamsTech tipsMicrosoft 365 BackupVeeam
11:11 Systems

Author: 11:11 Systems

Post navigation

PreviousPrevious post:You Can’t Win: Learning to Live with Security Pessimism

Related Posts

Veeam 12
Veeam 12: Appropriate Direct to Object Storage Use Cases
February 15, 2023
Veeam 12
Veeam 12 Preview: Veeam Cloud Connect Backup vs. Object Storage
February 14, 2023
Veeam 12
Veeam 12 Preview: Multi-Factor Authentication
February 7, 2023
Veeam 365 Backup v7 BETA: SaaSy Immutability
February 2, 2023
Veeam 12
Veeam 12 Preview — Object Storage
December 24, 2022
Don’t Panic! M365 Admin’s Guide to the Modern Auth Upgrade
August 18, 2022
PRODUCTS & SERVICES
  • Cloud
  • Backup
  • Disaster Recovery
  • Managed Security
  • Connectivity Solutions
  • Compliance
COMPANY
  • Why 11:11
  • Customer Stories
  • Careers
  • Leadership
  • Technology Partners
  • News & Media
  • Contact Support
CLOUD REGIONS
  • North America
  • EMEA
  • APAC
CONNECT
  • LinkedIn
  • Twitter
  • Facebook
  • Youtube

© 2023 11:11 Systems Inc., All Rights Reserved | Privacy Notice

Go to Top
PRIVACY POLICY AND COOKIE CONSENT
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
Manage options Manage services Manage vendors Read more about these purposes
View preferences
{title} {title} {title}
PRIVACY POLICY AND COOKIE CONSENT
To provide the best experiences, we use technologies like cookies to store and/or access device information that allows us to process data such as browsing behavior. Not consenting or withdrawing consent, may adversely affect certain features and functions. By clicking Accept, closing this message, or continuing to browse, you consent to these technologies and accept our Privacy Notice.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
Manage options Manage services Manage vendors Read more about these purposes
View preferences
{title} {title} {title}