License Editions: For license details, see Plans & Pricing.
To back up Microsoft Teams Chat data, you must register a dedicated Azure application in your Microsoft 365 tenant. This application allows Druva to use Microsoft’s Export APIs, which are required to retrieve Teams chat content.
Prerequisites
Teams Chat must be enabled in your Druva license.
Procedure: Register the Azure Application
Step 1: Open the Setup Wizard
Sign in to the Druva Cloud Platform console.
Go to Microsoft 365 > Overview.
In the Teams Chat section, click Install Azure App.
Alternatively, you can click Manage Apps in the top right corner. This will launch the setup wizard.
Step 2: Register the Application
Purpose: This step creates the Azure application and assigns all required permissions.
In the wizard, click Copy the script button under Step 1.
Run the copied script in your Azure environment.
The script performs the following actions:
Registers an Azure application named Teams Chat Backup.
Assigns the permissions User.Read.All and Chat.Read.All, which are required for Teams Chat backup.
Creates both a client secret and a self-signed certificate for authentication.
📝NOTE: The script must be executed from Azure Cloud Shell using PowerShell version 7.x or later. Executing the script in any other PowerShell version or environment may result in errors.
After the script completes, copy its output.
Paste the output into the PowerShell Script Output field in the Druva wizard under Step 2.
All application details are populated automatically.
Step 3: Save the Application Details
Verify the automatically populated fields: Application Name, Client ID, Client Secret, Secret Expiry, Thumbprint, and Private Key.
Click Save.
Confirm that the message “Successfully installed azure app for Teams chat.” appears.
📝NOTE:
All fields are required, except for Secret Expiry. If the Secret Expiry field is left blank (optional), the secret will be set to an indefinite expiry time.
After you save the form, the Secret and Private Key fields are masked. These fields are write-only. You can update them, but you cannot view or retrieve their values again.
Optional Script Execution Variations (Advanced Usage)
Druva provides a PowerShell script to simplify Azure application creation for Teams Chat backups. While most customers can use the script with default settings, the script also supports advanced execution options for organizations with specific naming, security, or certificate management requirements.
Default execution
Run the script without parameters to create the Azure application with default settings. This mode outputs only the Base64-encoded configuration string required by the Druva setup wizard.
./byoa_app_creation_cloud_shell_with_auth.ps1
Verbose execution
Run the script in verbose mode to view detailed progress, configuration steps, and generated values during execution.
./byoa_app_creation_cloud_shell_with_auth.ps1 -v
Custom application name and secret expiry
You can specify a custom Azure application name and control the client secret expiration period (in months).
./byoa_app_creation_cloud_shell_with_auth.ps1 -AppName "MyCustomApp" -SecretMonths 12 -v
Using your own certificate (automatic upload)
If your organization requires the use of a customer-managed certificate, you can provide your own certificate details. In this mode, the script automatically uploads the certificate to Azure AD.
./byoa_app_creation_cloud_shell_with_auth.ps1 -Thumbprint "ABC123..." -PrivateKey "-----BEGIN PRIVATE KEY-----..." -Certificate "-----BEGIN CERTIFICATE-----..." -v
Using your own certificate (manual upload)
If you prefer to upload the certificate manually through the Azure portal, omit the certificate parameter. After script execution, you must upload the certificate to the Azure application yourself.
./byoa_app_creation_cloud_shell_with_auth.ps1 -Thumbprint "ABC123..." -PrivateKey "-----BEGIN PRIVATE KEY-----..." -v
Viewing full script help
To review all supported parameters, descriptions, and examples, use the built-in PowerShell help command:
Get-Help ./byoa_app_creation_cloud_shell_with_auth.ps1 -Full
Troubleshooting Connection Issues
The application can display two possible connection statuses:
Connected – The app is successfully authenticated and all required permissions are valid.
Not Connected – The app cannot authenticate or validate its configuration.
Steps to Diagnose a Not Connected Status
If the connection status shows Not Connected, perform the following checks:
Validate the client secret - Confirm that the client secret is active and has not expired.
Verify required permissions - Ensure the Azure application has the correct API permissions assigned:
User.Read.AllandChat.Read.AllMatch credentials with Azure configuration - Confirm that the credentials entered in the configuration wizard match the corresponding values in Azure.
Summary
You must register a dedicated Azure application to enable Druva to access Microsoft’s Export APIs for Teams Chat backups.
The setup wizard script automates application creation, permission assignment, and authentication setup.
After saving the populated details, the Azure application connects Druva to Teams Chat backups.
If the connection fails, verify credentials, permissions, and secret validity.