Breaking Security Change: Ability to chat with bots based on custom app policy

In a breaking security change, Microsoft will block the ability to chat with bots that are not connected to a Microsoft Teams app. From January 31, 2024, users who are not assigned to an app setup policy which allows uploading custom apps will no longer be able to chat with Azure and PVA bots that are not published as an app. This change will impact users who rely on these bots in their day-to-day work. For tenants who rely on such bots, Microsoft recommends turning on the “Upload custom apps” setting in app setup policies for users who rely on such bots. Alternatively, users can incorporate bots into Microsoft Teams apps and publish them in their org to allow users without the permission to upload custom apps to access them. The ability to interact with a bot that is not published as a Teams app is generally meant for developers testing the bots before full distribution as a Teams app.

Stay prepared for this significant security change by adapting your bot usage accordingly to avoid any disruptions to your day-to-day operations. The post Breaking Security Change: Ability to chat with bots based on custom app policy first appeared on M365 Admin.