Breaking Security Change: Ability to chat with bots based on custom app policy
On January 31st, 2024, the ability to chat with bots that are not connected to a Microsoft Teams app (e.g. Azure and PVA bots that are not published as an app) will be blocked for users who are not assigned to an app setup policy which allows uploading custom apps.
When this will happen:
How this affects your organization:
Users who rely on these bots in their day-to-day work will be impacted if the bot is not connected to a published Microsoft Teams app in the org.
What you need to do to prepare:
For tenants who rely on such bots to perform their day-to-day work, the following options need to be considered:
- Turn on the “Upload custom apps” setting in app setup policies for users who rely on such bots. The ability to interact with a bot that is not published as a Microsoft Teams app is generally meant for developers testing the bots before full distribution as a Teams app.
- Incorporate bots into Microsoft Teams apps and publish them in your org to allow users without the permission to upload custom apps to access them. The process for doing this varies on the type of bot being developed.
Message ID: MC699716
No comments yet