Best practice to retrieve recordings for a meeting via Graph API

Question

Hi everyone,

Just a quick question to confirm best practices.

We currently have an integration with the /onlineMeetings graph API to create meetings.

Once a meeting is completed, we query chatmessage-get to find any recordings, and we subsequently record any links within our system.

However, many of our clients are concerned that Chat.Read (delegate) and Chat.Read.All (application) are very broad permissions for this task.

Is our current implementation the best practice for what we are trying to achieve?

Additionally, I've noticed that this task may be possible with the OnlineMeeting.ReadWrite.All permissions and the Meeting Artifact Endpoints, but we may have to change the integration to create an event, rather than a meeting (among a few other changes).

Cheers in advance,

James

Answer 1

Hi

Thanks for reaching out. The app permissions that you have configured to query chat messages are correct. However currently there is no way to create application policies for chat messages to scope access. I would suggest you provide your comments and feedback on the Microsoft Graph Feedback portal.

Regarding OnlineMeeting.ReadWrite.All permissions and the Meeting Artifact Endpoints administrators can use ApplicationAccessPolicy cmdlets to control online meeting access for an app that has been granted any of the following application permissions:

OnlineMeetings.Read.All

OnlineMeetings.ReadWrite.All

OnlineMeetingArtifact.Read.All

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

Thanks.