How do I add TeamworkUserInteraction.Read.All to my app registration?

Go to Azure Portal > App registrations > Your app > API permissions > Add permission > Microsoft Graph, then search for TeamworkUserInteraction.Read.All and select it.

TeamworkUserInteraction.Read.All Permission - Microsoft Graph API

TeamworkUserInteraction.Read.All

Permission Details

Delegated Permission

Read all of the possible Teams interactions between the user and other users

Allows the app to read all of the possible Teams interactions between the signed-in user and other users

Permission ID: b4d26916-07e0-4daf-9096-9f6d9174aa96

Properties

Property	Type	Description
`id`	`string`	The unique identifier for an entity. Read-only.
`primaryChannel`	`object`	The general channel for the team.
`description`	`string`Nullable	An optional description for the team. Maximum length: 1,024 characters.
`internalId`	`string`Nullable	A unique ID for the team used in a few places such as the audit log/Office 365 Management Activity API.
`createdDateTime`	`date-time`Nullable	Timestamp at which the team was created.
`displayName`	`string`Nullable	The name of the team.
`isMembershipLimitedToOwners`	`boolean`Nullable	If set to true, the team is currently in the owner-only team membership state and inaccessible by other team members, such as students.
`classification`	`string`Nullable	An optional label. Typically describes the data or business sensitivity of the team. Must match one of a pre-configured set in the tenant's directory.
`allChannels`	`microsoft.graph.channel collection`	List of channels either hosted in or shared with the team (incoming channels).
`isArchived`	`boolean`Nullable	Whether this team is in read-only mode.
`channels`	`microsoft.graph.channel collection`	The collection of channels and messages associated with the team.
`group`	`object`
`specialization`	`object`	Optional. Indicates whether the team is intended for a particular use case. Each team specialization has access to unique behaviors and experiences targeted to its use case.
`incomingChannels`	`microsoft.graph.channel collection`	List of channels shared with the team.
`firstChannelName`	`string`Nullable	The name of the first channel in the team. This is an optional property, only used during team creation and isn't returned in methods to get and list teams.

Showing 15 of 34 properties. View all on Microsoft Learn →

Graph Methods

Delegated access App-only access

No API methods available for this version.

Methods
POST `/teamwork/determineIfInteractionIsAllowed`

No PowerShell cmdlets available for this version.

Commands
`Invoke-MgBetaDetermineTeamworkIfInteractionIsAllowed`

Code Examples

C# / .NET SDK

// Install: dotnet add package Microsoft.Graph
// Install: dotnet add package Azure.Identity
using Microsoft.Graph;
using Azure.Identity;

// Delegated permissions - interactive user sign-in
var scopes = new[] { "TeamworkUserInteraction.Read.All" };
var options = new InteractiveBrowserCredentialOptions
{
    ClientId = "YOUR_CLIENT_ID",
    TenantId = "YOUR_TENANT_ID",
    RedirectUri = new Uri("http://localhost")
};
var credential = new InteractiveBrowserCredential(options);
var graphClient = new GraphServiceClient(credential, scopes);

// Example: GET /me
var result = await graphClient.Me.GetAsync();
Console.WriteLine($"User: {result?.DisplayName}");

JavaScript / TypeScript

// npm install @azure/msal-browser @microsoft/microsoft-graph-client
import { PublicClientApplication } from "@azure/msal-browser";
import { Client } from "@microsoft/microsoft-graph-client";
import { AuthCodeMSALBrowserAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/authCodeMsalBrowser";

const msalConfig = {
    auth: {
        clientId: "YOUR_CLIENT_ID",
        authority: "https://login.microsoftonline.com/YOUR_TENANT_ID"
    }
};

const pca = new PublicClientApplication(msalConfig);
await pca.initialize();

// Delegated: Login with required scope
const loginResponse = await pca.loginPopup({
    scopes: ["TeamworkUserInteraction.Read.All"]
});

const authProvider = new AuthCodeMSALBrowserAuthenticationProvider(pca, {
    account: loginResponse.account,
    scopes: ["TeamworkUserInteraction.Read.All"],
    interactionType: "popup"
});

const graphClient = Client.initWithMiddleware({ authProvider });

// Example: GET /me
const result = await graphClient.api("/me").get();
console.log(result);

PowerShell

# Install Microsoft Graph PowerShell module
Install-Module Microsoft.Graph -Scope CurrentUser

# Delegated access - interactive sign-in
Connect-MgGraph -Scopes "TeamworkUserInteraction.Read.All"

# Verify connection
Get-MgContext | Select-Object Account, TenantId, Scopes

# Example: GET /me
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/me"
$result | ConvertTo-Json -Depth 5


# Always disconnect when done
Disconnect-MgGraph

Python

# pip install msgraph-sdk azure-identity
from azure.identity import InteractiveBrowserCredential, ClientSecretCredential
from msgraph import GraphServiceClient
import asyncio

# Delegated permissions - interactive browser sign-in
credential = InteractiveBrowserCredential(
    client_id="YOUR_CLIENT_ID",
    tenant_id="YOUR_TENANT_ID"
)
scopes = ["TeamworkUserInteraction.Read.All"]
client = GraphServiceClient(credential, scopes)

async def get_data():
    # Example: GET /me
    result = await client.me.get()
    print(f"User: {result.display_name}")
    return result

asyncio.run(get_data())

App Registration

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

Select Permission Type

Choose Delegated permissions and search for TeamworkUserInteraction.Read.All

Grant Admin Consent

This permission requires admin consent. Grant consent in the Azure portal.