Laurel uses the Microsoft Graph API to capture call records from Microsoft Teams. This guide walks IT administrators through registering an application in Microsoft Entra and granting the required permissions.
Resources:
Overview
You will complete 4 steps in Entra via your Azure Portal (https://entra.microsoft.com):
Create an App Registration
Generate a client secret
Grant required API permissions
Share credentials securely with your Laurel Implementation team, or enter them directly within Laurel's Admin settings
Set up instructions
Step 1: Create an App Registration
Sign in to https://entra.microsoft.com.
In the left-hand Entra ID menu, click App registrations.
In the top menu, click + New registration.
Name the application
Laurel - MSTeamsand click Register.
Step 2: Generate a Client Secret
In your new app registration, go to Certificates & secrets > New client secret.
Set the following values:
Description:
laurel-secret-1Expires:
24 months
Click Add.
Immediately copy and securely store the secret value — it will not be visible again after you leave this page.
Note the expiration date; you must generate a new secret before it expires to avoid disruption to the integration.
Step 3: Grant Required API Permissions
In your app registration, go to API permissions > Add a permission
Select Microsoft Graph > Application permissions
Search for and select each of the following permissions:
Permission | Type | Purpose |
CallRecords.Read.All | Application | Capture Teams call records |
OnlineMeetings.Read.All | Application | Capture Teams online meeting details |
User.Read.All | Application | Identify users in your tenant |
Note: These permissions are only applied to the users who are given access to the application. We recommend using a user group for users that would have access to Laurel.
Instructions for User Group creation and assignment can be found here:
4. Once all three permissions have been added, click Grant admin consent for [your organization] and confirm.
All three added permissions should then show a green Granted status.
Note: If you are not an Entra admin, you will need to request that an admin grants consent.
Step 4: Share Credentials with Laurel
Once configuration is complete, please either:
Share securely with your Laurel Implementation team, or
Enter directly in Laurel's Customer Integration settings after you've been assigned Super Customer Admin permissions.
See below for the required credentials necessary for integration activation (found under the Overview tab of your app registration):
Application (client) ID
Directory (tenant) ID
Client secret value
Client secret expiration date