Group.Read.All
Organization.Read.All
TeamsAppInstallation.ReadForTeam.All
Channel.ReadBasic.All
ChannelMember.Read.All
— application permissions, granted to the app registration with admin consent.
Endpoints:
GET /v1.0/groups?$filter=resourceProvisioningOptions/Any(x:x eq 'Team') · GET /v1.0/teams/{id}/installedApps?$expand=teamsApp,teamsAppDefinition · GET /v1.0/teams/{id}/channels?$filter=membershipType eq 'shared' · GET /v1.0/teams/{id}/channels/{id}/sharedWithTeams · GET /v1.0/teams/{id}/channels/{id}/members
One scan feeds both the Teams app and the shared channel reports: two to four Graph calls per team, six teams at a time. Large tenants take several minutes. Whether external people can join at all is set by cross-tenant access (B2B direct connect) - see Cross-tenant Access & B2B Trust.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Shared Channels with External Members
Shared channels (Teams Connect) let people from other organisations work inside a channel without switching tenants - and without appearing as guests in your directory. Their files live in your SharePoint. Channels shared with other organisations' teams or with external people are listed first.
Press Run scan to read the installed apps and shared channels of every team.