Page Comparison

CAM App Registration

This process allows adding the CAM App (by Litera) via the Azure Active Directory. User/organization can be imported to the Teams app once the registration completes. For iManage M365 App Proxy, see iManage

1. Login to M365 with your Global Admin Access. Go to “Azure portal” : https://portal.azure.com/#home.

2. Go to Azure Active Directory in the far-left hand menu.

3. Click on App registrations on the left-side bar.

4. Click on the New Registration tab.

5. Set a name for it. For example, CAM Teams App. 

6. Select the Accounts option based on the organization’s requirements:

   1. Accounts in this organizational directory only (Azure AD directory - Single tenant)

   2. Accounts in any organizational directory (Any Azure AD directory - Multitenant)

7. Fill in the Redirect URL with a redirect URL listed in the following table.

8. To put in the redirect URI, you will have to select the “Web” option from the dropdown list that displays.
   Redirect Endpoint URI's

8. Click Register to register the Add-in. The system will show a successfully created message with the information created. Save the retrieved information (client id and client secret), since you will need this in the next step ahead and to enter in the M365 configuration setup. 

9. On the App Registration page, click into APP, find the Application ID, Directory (Tenant) Id field.

10. Save this information in Notepad - The ID and Directory (Tenant) Id fields will be used when completing the M365 configuration panel in CAM later in the process.

11. Click on the Certificates and Secrets page in the left-hand menu.

12. In the Client Secret section, click New client secret; Enter a description and select an expiry length. Save the Value in Notepad- You will need to put this into the Application Password field in the M365 Configuration panel in CAM later in the process.

Microsoft Graph Permissions in M365

The following permissions will need to be enabled in the Azure Portal.

1. Go to "Azure Active Directory".

2. Click on "App registration" in the left side bar.

3. Select the registered app.

4. Click on "API permissions" in the left side bar.

5. To configure new permissions, Click on "+ Add a permission"

6. Select "Microsoft Graph"

7. Now add Delegated and Application Permissions provided below

8. Click on "Add permissions" and select "Grant admin consent for <global admin user>"

Required Permissions to Create or Manage Teams

Permissions for -APIs my Organization Uses-> Microsoft Teams Services

Optional Permissions

These permissions are optional and can be added based on your firm’s usage of CAM.

Private Channel

CAM uses Azure AD - Microsoft Graph API - to access resources in M365 to create Groups and Teams. When you create a private channel, it has its own SharePoint site collection. The separate site collection is to ensure access to that private channel files are restricted to only members of the private channel compared to the team site where team owners have access to all the assets within the site collection.  

The site collection created using private channels as per Microsoft documentation is not visible in the SharePoint admin center unless someone manually clicks on the Files tab in teams once the SharePoint site will be available in 1-2 min or almost instantly. 

To trigger the click event on the Files tab, CAM needs the Microsoft native API permission which can be added by following the steps -

1.  Login to M365 with your Global Admin Access. Go to the “Azure portal”. https://portal.azure.com/#home 

2. Go to Azure Active Directory on the far-left menu bar. 

3. Click on App Registration. 

4. Select the registered app.

5. Click on 

   Anchor
   Manifest Manifest

   Manifest. 

6. On the right side (in the manifest), click within the manifest and scroll down till the end. 

7. On your keyboard, process Ctrl+F to bring up the search bar.

8. Search requiredResourceAccess

9. Put comma, after the previous node then copy below node in the List -

{
            "resourceAppId": "cc15fd57-2c6c-4117-a88c-83b1d56b4bbe",
            "resourceAccess": [
                {
                    "id": "fd7bf697-168c-45be-b7ba-e94b3529deff",
                    "type": "Scope"
                }
            ]
  },

10. Click Save. 

11. Now click on API permissions on the left bar. 

12. On the right side, scroll down till the end. 

13. Under "Microsoft Teams Services (1)", it will list user_impersonation under Microsoft Teams Services, status as Not granted for <global admin user>. 

14. In order to provide admin consent, scroll to the top of the page and click on select Grant admin consent for <global admin user>. 

15. Confirmation message pop up displays, select “Yes”, add other granted permissions to configured permissions.

1. Click Save and Continue. 

2. Follow the instructions on the page until permissions are granted successfully. 

Snapshot of Manifest

Service Account Permission - Use Planner in Teams

To be able to create the Planner tab in Team Channels, Microsoft requires that delegated / service account users be created and is a member of the team. However, to build a team, there must be an appointed owner. Because of this requirement, you need an additional service account so that you can switch to it to create a planner. 

1. In the M365 Admin Centre, in the left-hand menu click on Users and then Active Users.

2. Click Add User. It is recommended to use a generic name such as “Planner User” with an email address of “planneruser@<domain>” 

3. Assign the user a license. 

4. Do not assign any administration permissions or roles. This user should be set up as a standard user. 

5. Record the email address, as you will require this with configuring M365 within the CAM platform.

Configuration in CAM Planner

Follow the steps to create a Planner inside a Channel.

Follow these steps to create a Planner.

1. Create a Planner Template. Click here to Setup the Planner structure in the template Editor.

2. Create a Planner on a Teams/Channel using a CSV upload or Request workflow using the Template.

   1. Set up a CSV upload.

      1. Enter the Unique Ids metadata for the M365 creating Teams. Click the CSV parameters for further help.
         Sample CSV

         

      2. Go to the Jobs tab and upload the CSV.

3. Configure a Request Workflow.

4. On a successful job execution, the Planner displayed on teams as follows:

Steps to Set an Additional Service Account in the External System Configuration

1. Go to Administration.

2. Click External System Configuration.

3. Select M365.

4. Click Edit. The following screen will be displayed:

Connecting M365 with the CAM Platform

To add a New M365 Connection to the CAM Platform 

1. As a CAM Admin User, log into CAM and click on the Administration Tab. 

2. Select External System Configuration.

3. Click the M365 tab (if you cannot see the M365 tab, please click on the Settings tab, click on the Active slide under the M365 box, and click Save at the bottom of the screen. If you cannot see the Office 365 box on the Settings page, please contact Prosperoware.Licensing@litera.com) 

4. In the panel for M365 Authentication click the Add New button. 

5. In the window for M365- Add New, type the information in the provided fields, based on the table below,

6. The following information will now be available to continue entering in the CAM M365 tab.

   1. Some fields are optional and can be filled if you are choosing to include Sharepoint in the M365 Connection.