Grant an account access to all Teams and Channels

Question

Hi there

My company have been given instruction on how to setup a Teams integration between a security product, and MS Teams. The idea being, when someone in the company has an action, they can be messaged via the tool by using MS Teams. At the moment we use Email for this, but MS teams is desired.

The instructions I have been given include creating an App reg and have numerous API permissions to assign such as channelmessage.send, chatmessage.send, group.read.all....these all seem required, I can understand this.

However, they then have an action where i need to create a bog std entraID user, assign it an E3 license so that teams will work, and then that account is used within the security app to authenticate into our tenant and complete the integration. The notes I have state this abt permissions for this account: Pay special attention to which Group memberships are assigned, as the user for the integration will only be able to message Channels and Members of those groups.

This seems odd to me. A std user should be able to message anyone in teams, and in fact this user can as I have tested it by logging into office.com. I have asked the vendor why this level of permissions is needed to channels, but they don't seem to be answering me clearly, they just say it's needed for proper functioning of the integration.

I dont want to assign this integration user with any enhanced level of rights in Teams if I can help it, and maybe the vendor will come back and tell me that for basic message chat to individuals, i dont need to do anything else.

BUT, if I did need to grant this account the ability to Read all channels and read the members of them..... is there a way to accomplish this without resorting to Global Reader? What is still confusing me though is why the api permissions set via the app registration are not sufficient...

Tom