This guide explains how a customer's Azure administrator can connect their Azure Active Directory (tenant) to the Altamira application, allowing it to create and manage Microsoft Teams meetings using application-only access (no user interaction required).

1. Grant Admin Consent for the App

The administrator of the customer's tenant must grant admin consent to authorize the required application permissions.

Consent URL (replace with customer's tenant ID):

https://login.microsoftonline.com/<CUSTOMER_TENANT_ID>/adminconsent?client_id=068cc7eb-b225-4ff3-9073-5d449de6a008

Replace <CUSTOMER_TENANT_ID> with your actual Azure directory (tenant) ID.

What this step does:

• Registers the "Altamira Online Meetings" app as an Enterprise Application in the customer tenant
• Grants the declared application permissions

2. API Permissions Being Granted

The app will request the following Application permissions from Microsoft Graph:

These permissions are used strictly to manage meetings for users who are explicitly authorized via policy.

No actions will be performed for users who are not explicitly assigned.

3. Assign Access Policy to the App and Users (PowerShell)

Requirements:

• PowerShell module MicrosoftTeams installed (Install-Module MicrosoftTeams)
• Logged in as a Global Administrator of the customer tenant

Step 1: Connect to the tenant

Connect-MicrosoftTeams -TenantId <CUSTOMER_TENANT_ID>

Step 2: Create the application access policy

New-CsApplicationAccessPolicy \
    -Identity AltamiraOnlineMeetingPolicyApp \
    -AppIds "app-id" \
    -Description "Policy to allow Altamira app to create Teams meetings"

This policy defines which application is authorized to act on behalf of specific users.

Step 3: Assign the policy to one or more users

Grant-CsApplicationAccessPolicy \
    -PolicyName AltamiraOnlineMeetingPolicyApp \
    -Identity "username@company.com"

#To assign the policy to all users
#Grant-CsApplicationAccessPolicy -PolicyName "AltamiraOnlineMeeting" -Global

Only users who receive this policy can be targeted by the Altamira app's API.

✉️ You can also assign the policy in batch to multiple users using a script.

4. Verify

To verify that the user has the policy assigned:

Get-CsOnlineUser -Identity "username@company.com" | Select DisplayName, ApplicationAccessPolicy

Expected output:

ApplicationAccessPolicy
------------------------
AltamiraOnlineMeetingPolicyApp

Optional: Removing the Policy

To unassign the policy from a user:

Grant-CsApplicationAccessPolicy -Identity "username@company.com" -PolicyName AltamiraOnlineMeetingPolicyApp

To delete the policy entirely:

Remove-CsApplicationAccessPolicy -Identity "AltamiraOnlineMeetingPolicyApp"

Integration is Now Active

The Altamira app is now able to:

• Create Teams meetings for the assigned users
• Invite external participants
• Manage meetings without requiring user interaction

For any technical questions or support, contact the Altamira team.