Created by Claude - please verify

Teams apps - installed apps per team from an on-demand Graph scan; 'Microsoft (store)' is a name-based guess because Graph does not return an app's publisher.

Required Microsoft Graph permissions

Group.Read.All Organization.Read.All TeamsAppInstallation.ReadForTeam.All Channel.ReadBasic.All ChannelMember.Read.All — application permissions, granted to the app registration with admin consent.

Endpoints: GET /v1.0/groups?$filter=resourceProvisioningOptions/Any(x:x eq 'Team') · GET /v1.0/teams/{id}/installedApps?$expand=teamsApp,teamsAppDefinition · GET /v1.0/teams/{id}/channels?$filter=membershipType eq 'shared' · GET /v1.0/teams/{id}/channels/{id}/sharedWithTeams · GET /v1.0/teams/{id}/channels/{id}/members

One scan feeds both the Teams app and the shared channel reports: two to four Graph calls per team, six teams at a time. Large tenants take several minutes. Apps installed only in personal scope or in chats are not included.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Teams App Inventory

Every app added to a team can read that team's messages, files or members through the permissions it requested. Sideloaded apps bypassed the org catalog entirely; third-party store apps with resource-specific permissions can read team data without a tenant-wide admin consent.

Press Run scan to read the installed apps and shared channels of every team.