Upcoming Microsoft Teams Permissions Update Required

Haley Patrone

Hi Community, 

*UPDATED* We will be updating our Smartsheet integration with Microsoft Teams on May 28th.

Why are we updating: The Smartsheet integration with Microsoft Teams requires our customers’ IT Admins to review and accept some permissions in order to have the add-in work. A few of these permissions will be downgraded from application-level to delegated to reduce security risk.

What this means for you:  All SysAdmins will need to reauthenticate their organization’s Teams integration starting May 28, 2025  through their Azure Portal. More detailed instructions available at this help article.

If these permissions are not accepted, any new users looking to install the Smartsheet integration with Microsoft Teams will be prompted for consent and to request to have this updated permission accepted by their IT admin. Similarly, any user that tries to add a new Smartsheet tab (if the updated permissions hasn’t been accepted) will be prompted for consent and to request to have this updated permission accepted by their IT admin. 

Please follow the instructions here to accept updated permissions for your Teams account on May 28, 2025. 

Thanks,

The Smartsheet Product Team

eliweitz

Hey!

Can any of this be done ahead of May 19th? Or will something change on the 19th that will prompt admins to take action? Just trying to get ahead of the change if possible to reduce impact on users.

Pauline J

I also have a lot of questions, as the admin for Teams and SS. I already have Teams integrated with SS; we receive notifications in Teams as well as emails. Do we really need to do anything on 5/19? I read the instruction link/s above (they both point to the same page); they mention the installation link — but there is none? Will that magically appear? There just isn't enough info to fully understand what needs to be done and when … 12:01 on 5/19? Especially based on our current integration that already works… Do the Team permissions for accepting ALL 3rd party apps have to remain yes? We don't allow that as a system security policy…

Any chance for a quick forum where we can post these types of questions?

Haley Patrone

Great questions - @eliweitz there is not an option to take action before the 19th, but we will send a reminder the day of the update with instructions on how to accept the new permissions and you will also receive an email reminding you to take action, if you haven't already, about a week after the update occurs. @Pauline J it will be a straightforward process once the update has been made and we will notify you once you need to take action.

This is where you, or an Azure Administrator, will need to go within your Azure portal after the update: navigate to the Azure Portal > Azure Active Directory > Enterprise applications > Security > Consent and permissions to Allow user consent for apps. There will be an option to accept the new permissions there after the update.

Tommy Sandoval

https://community.smartsheet.com/discussion/comment/483796#Comment_483796

Hey eliweitz, did you see any change on your end?

eliweitz

@Tommy Sandoval I unfortunately did not - however I did just receive notice that the change has been rescheduled to occur this coming Thursday now.

Tommy Sandoval

@eliweitz, are you able to share this notice? Through what method was this shared with you? Can't find it online, thank you eliweitz!

Edit: Nvm I got it, thank you @eliweitz

Pauline J

@Haley Patrone

We have not received an email notice that this is live yet — however, I opened my Teams Admin menus to see what our settings were. The information in the article https://help.smartsheet.com/articles/2476201-integrate-smartsheet-with-microsoft-teams?_gl=1*1q0fqc*_gcl_au*NTE1Mzg3MjI3LjE3NDY0NjA5MzU.*_ga*Njc0Mzg0NjM0LjE3NDU4NDUyNTY.*_ga_ZYH7XNXMZK*czE3NDc5MjM4NzckbzE3JGcxJHQxNzQ3OTIzOTU0JGo1MyRsMCRoMCRkOVltd2otUzlIdk5GS0FweVZLRWVPQ0JTR2xITmJJSTVCZw..

Is not quite correct — there is no "Allowed" option, the app is either blocked or unblocked. Global permissions are not set within Teams Permissions …. It is not my intention to be negative about this — the reality from a customer perspective is that this transition is confusing and the instructions not correct, and a bit unclear.

We also aready have Smartsheet allowed in Teams, so I'm not sure whether there is really anything that needs to be done?

And … one more item: As the 365 Admin, I do not want my users to be able to allow ANY apps for Teams. what is the impact if we have it set to the need to request an app?

Haley Patrone

Hi everyone, after some back and forth with the Microsoft team, this release will be moved to May 28th. We will notify you of the change via bot message and provide further instruction there. Thank you so much for your patience.

sys_admin

I agree that these comms are lacking in information. Asking Admins to modify global policies to allow Third Party Apps is not something we're going to do just because one vendor says so. Additionally all the references they talk about are all being deprecated soon anyway in MS Teams Admin with Microsoft's planned move away from App Permission Policies and move to using App-Centric Policies. I suggest SmartSheet work with MS to produce more detailed guidance on how to set the correct App-Centric policies with regard to Smart sheet ONLY (and not all 3rd party apps) - and postpone until after MS have moved to App-Centric policies.

Additionally - any setting in Azure to 'allow user consent' should really be accompanied by the "Low Impact Permissions" settings to ensure only those permisisons can be consented to - yet SmartSheet make no mention of this or whether their app specifically needs any permissions outside of "Low Impact Permissions". I suspect not - but they should make it clear.