How to add Microsoft Teams to Dropbox Dash

Updated May 09, 2025
person icon

This article describes a feature available to all Dropbox Dash customers.


You can add your organization’s Microsoft Teams account to Dropbox Dash so you can access and search your Teams content directly within Dash. By syncing your Teams account with Dash, you’ll get quick access to your content and answers with a single click.

Authorization methods

There are two methods to authorize the connection between Microsoft Teams and Dash:

  1. Register app in Microsoft Azure: Exchange certificates between Dash and Microsoft Entra ID to register the app on Microsoft Azure.
    • Note: This method is recommended as it links the authorization to the Azure system rather than to an admin user account.
  2. Authenticate with a service account: Create an admin account for accessing Microsoft Teams content to allow authorization between Dash and Microsoft Teams.

Follow the instructions below for the method that best works for your organization.

Method 1: How to register Dropbox Dash in Microsoft Entra

  1. Log in to dash.ai with your admin credentials. 
  2. Click your avatar (profile picture or initials) in the lower left.
  3. Select Admin console.
  4. Click Dash in the left sidebar.
  5. Click Apps.
  6. Click the More apps tab.
  7. Click Add to the right of Microsoft Teams.
  8. Select Register app in Microsoft Azure, then click Start.
  9. Review the steps in What to expect, then click Next.
  10. Click Next in the Set up Dash in Azure window.
  11.  Click Azure portal and log in with your credentials.

At this point, you’ll need to create a new app registration in Microsoft Azure before you can continue with the prompts in Dash.

To create a new app registration in Microsoft Azure:

  1. In Microsoft Azure, click Microsoft Entra ID in the left sidebar.
  2. Click Manage in the left sidebar, then click App registrations in the expanded list.
  3. Click New registration.
  4. On the Register an application page, enter “Dash” in the Name field.
  5. Under Supported account types, select Accounts in this organizational directory only.
  6. Under Redirect URI (optional), click Select a platform, then select Web.
  7. Paste the following address into the empty field: https://www.dropbox.com/oauth_connectors/redirect
  8. Click Register.

Once you’ve registered Dash in Microsoft Azure, you’ll need to add the appropriate certificates and permissions. 

To add a certificate:

  1. On the Dash app registration overview page in Microsoft Azure, click Add a certificate or secret next to Client credentials.

2. Create a private key for secure authentication between Microsoft Teams and Dash.

3. Click Upload certificate, choose your file, then click Add

To add API permissions:

  1. On the Dash overview page in Microsoft Azure, click API permissions in the left sidebar.
  2. Click Add a permission.
  3. Select Microsoft Graph.
  4. Select the application permissions type.
  5. Add the following permissions:
    • Team.ReadBasic.All
    • TeamMember.Read.All
    • TeamSettings.Read.All
    • TeamworkTag.Read.All
    • Chat.Read.All
    • ChannelMember.Read.All
    • ChannelMessage.Read.All
    • offline_access
    • User.Read.All
    • Channel.ReadBasic.All
    • Group.Read.All
    • Directory.Read.All
    • AuditLogsQuery.Read.All   
  6. Click Yes after reviewing the Grant admin consent confirmation prompt.
  7. Return to the Dash overview page in Microsoft Azure.

Finally, you’ll need to enter the Dash IDs from Microsoft Azure to the Dash admin console.

To do this:

  1. On the Dash overview page in Microsoft Azure, copy the Primary domain, then paste it into the Dropbox Dash prompt.
  2. Click Next.
  3. Copy the Application (client) ID and the Directory (tenant) ID from Microsoft Azure, then paste them in the prompt in Dropbox Dash.
  4. Click Next.
  5. Click Certificates and secrets in the left sidebar in Microsoft Azure.
  6. Copy the Thumbprint, then paste it into the Certificate thumbprint field in Dropbox Dash.
  7. Enter the private key associated with the certificate you uploaded to Azure. 
  8. Click Next.
  9. Log in to your admin account.
  10. Review the requested permissions in the pop-up window, then click Accept.
  11. Click Done in the Added Microsoft 365! window.
  12. Return to the admin console page on dropbox.com where you’ll find the Ready to Sync prompt.
  13. Click Start syncing.

Your Microsoft Teams content will start syncing immediately. This can take anywhere from a few hours to a few days, depending on how much content is in your account. Dash admins will receive an email when all content has been synced.

 

Method 2: How to create and add a service account

Service account requirements

To add Microsoft Teams to Dropbox Dash, a Microsoft Global administrator must authenticate and authorize a company-level integration between Teams and Dash. For better security and to prevent issues with the Microsoft Teams and Dash integration (like if an admin leaves), it's recommended to create a non-human admin service account in Microsoft Entra ID for this integration.

More information about using service accounts, including naming conventions, can be found in the Service account recommendations for SaaS service integrations with Dropbox Dash document.

highlighter icon

Note: For this article, “svc-dropboxdash-microsoft-teams” is referenced as the recommended account name for the service account.

Overview of setup:

  • Step 1: Create a new admin service account.
  • Step 2: Add Microsoft Teams to Dropbox Dash using the service account.

Step 1: How to create an admin service account for the Dropbox Dash integration

  1. Log in to Microsoft Azure with your admin credentials.
  2. Click Microsoft Entra ID
  3. Click Manage in the left sidebar.
  4. Click Users in the dropdown menu.
  5. Click New user.
  6. Click Create new user in the dropdown menu.
  7. Enter “svc-dropboxdash-microsoft-teams” in the user principal name (UPN) field.
  8. Open the dropdown menu under User principal name to select the domain to which the user will be associated.
  9. Leave Mail nickname as Derive from user principle name.
  10. Enter “svc-dropboxdash-microsoft-teams” in the Display name field.
  11. Enter a new password in the Password field.
    • You can either use the auto-generated password provided or set your own.
    • In either case, note the password somewhere safe, such as your password management vault.
  12. Leave Account enabled as checked.
  13. Click Next: Properties at the bottom of the page.
  14. Enter “svc-dropboxdash-microsoft-teams” in the First name field.
  15. Click Next: Assignments at the bottom of the page.
  16. Click Add role to open the Directory roles pane on the right.
  17. Enter “Global” in the search field.
  18. Check the Global Administrator role for this service account user.
  19. Click Select at the bottom of the page.
    • You should now see Global Administrator as a role for this user.
  20. Click Next: Review + create at the bottom of the page.
    • You should now see an overview of the account to be created.
  21. Verify that the User principal name is “svc-dropboxdash-microsoft-teams”.
  22. Verify that the assigned role is Global Administrator.
  23. Click Create to complete user creation.
    • You’ll be returned to the Users page and should see a Successfully created user pop-up message.
  24. Refresh the page to see your new service account.

Once your service account is created, you can add Microsoft Teams to Dropbox Dash. 

Step 2: How to add Microsoft Teams to Dropbox Dash using the service account

To add Microsoft Teams to Dropbox Dash using your service account:

  1. Log in to dash.ai with your admin credentials. 
  2. Click your avatar (profile picture or initials) in the lower left.
  3. Select Admin console.
  4. Click Dash in the left sidebar.
  5. Click Apps.
  6. Click the More apps tab.
  7. Click Add to the right of Microsoft Teams.
  8. Select Authenticate with a service account, then click Start.
  9. Review the What to expect prompt, then click Next.
  10. Click Next.
    • You’ll see a pop-up window asking you to allow Dropbox Dash to connect with Microsoft Azure. 
  11. Click Allow.
  12. Enter the email address for the service account created in the previous steps. 
  13. Click Next.
  14. Enter the password for your service account. 
  15. Click Sign in.
highlighter icon

Note: If you require multi-factor authentication (MFA) for accounts in your environment, you may be prompted for additional authentication associated with the service account.

16. Review the permissions requested, then click Accept.

17. Return to the admin console page on dropbox.com where you’ll find the Ready to Sync prompt.

18. Click Start syncing

Your Microsoft Teams content will start syncing immediately. This can take anywhere from a few hours to a few days, depending on how much content is in your account. Dash admins will receive an email when all content has been synced.

FAQs about adding Microsoft Teams to Dropbox Dash

Why do I need the permissions listed above when registering Dropbox Dash in Microsoft Azure for Microsoft Teams?

  • Team.ReadBasic.All: This permission shows information about the source of messages, like the team name, when displaying search results for Teams channel messages.
  • TeamMember.Read.All: This permission helps determine which users are part of specific teams and should be allowed to view related messages.
  • TeamSettings.Read.All: This permission is used to understand team-level configurations that may affect how users access or interact with messages. This helps Dash respect access rules and display accurate information based on each team’s settings.
  • TeamworkTag.Read.All: This permission improves search relevance and user relationships by indexing tag metadata related with team members and groups.
  • Chat.Read.All: This permission allows users to search and view direct and group messages they can access.
  • ChannelMember.Read.All: This permission ensures that users can only access messages from channels they belong to.
  • ChannelMessage.Read.All: This permission allows users to search and view past channel conversations they have access to, including details like the author and time stamp.
  • offline_access: This permission ensures Dash can maintain a consistent experience for users, even when they’re offline, by allowing background syncing and indexing.
  • User.Read.All: This permission is required to display avatars, names, and profile metadata of message authors and participants in group chats. It also supports relationship-based ranking in search.
  • Channel.ReadBasic.All: This permission provides necessary metadata for organizing and presenting search results, such as a message’s channel name.
  • Group.Read.All: This permission helps determine which users belong to which groups so Dash can enforce access controls and ensure users only see messages they’re allowed to view.
  •  Directory.Read.All: This permission is used to build and validate permission models, user relationships, and access eligibility across teams and chats.
  • AuditLogsQuery.Read.All: This permission is used for analytics and monitoring purposes to help understand usage patterns and improve integration performance and compliance.

Why do I need to create an unencrypted private key when generating a certificate in Microsoft Azure?

Private keys are used to establish trust between Dropbox Dash and Microsoft. When you upload a public key, Dash uses a private key to sign requests to Microsoft. This way, Microsoft can determine if the private key is paired with the public key you uploaded.

Encrypting a private key prevents it from being used for tasks like encryption or decryption. Therefore, we must use the unencrypted private key to sign requests.

Was this article helpful?

Let us know how why it didn't help:

Thanks for letting us know!

Thanks for your feedback!

Community answers

Other ways to get help