.svg)
%201.webp)
Microsoft Teams Enterprise Connector for eDiscovery & Data Collection
Collect Teams messages, channels, chats, files, and metadata for eDiscovery, compliance, and investigations seamlessly and in one motion. The Onna + Microsoft Teams Enterprise Connector lets you access communication data across your organization on a defensible, unified platform.
Why Connect Microsoft Teams to Your eDiscovery Collections Platform
Microsoft Teams is where critical business communication happens, from instant messaging and file sharing to voice and video calls, and team collaboration. When legal or compliance needs arise, that data has to be accessible, complete, and defensible.
Without the right tools, collecting from Microsoft Teams is harder than it should be because:
Messages are spread across channels, one-on-one chats, and group chats
Files and attachments are constantly shared across teams
Edits and deletions may occur after messages are sent
New users, teams, and channels are frequently added
The Onna + Microsoft Teams Enterprise Connector enables organizations to collect this data in a defensible and scalable way. Through the Microsoft 365 Graph API and Export API, the connector extracts messages, files, and metadata across channels and chats while preserving conversation context and activity history.
Microsoft Teams Connector Capabilities
The Onna + Microsoft Teams Enterprise Connector is designed for enterprise-scale data collection.
Key capabilities include:
Secure authorized connection
Identity mapping for Teams users
Audit logs for all collection activity
Full workspace archive support
Custodian-based data collections
Continuous sync of new users, teams, and channels
Resumable sync for large environments
Onna preservation support
File version tracking and metadata preservation
Edit and deletion capture
These capabilities allow organizations to perform targeted collections or maintain ongoing compliance archives across Microsoft Teams environments.
What Data Can Be Collected from Microsoft Teams Enterprise
The connector captures both content and metadata from Microsoft Teams environments including:
Conversations
Channel messages
One-on-one chats
Group chats
Threaded and daily grouped messages
Collaboration Features
GIFs and images
File attachments and their metadata
Edited messages
Deleted messages (when set up in Auto-sync and archive mode)
Metadata
Team, channel, and chat metadata including IDs, display names, topics, and archival status
Member information, including inactive members
Reactions and emojis
Conversation ID, name, and type
These collections preserve the structure and context of conversations and attachments so investigators can reconstruct discussions accurately.
Note: Onna is unable to collect channel or team events such as renames, member additions, or deletions, or files shared outside your organization.
Microsoft Teams Metadata Collected
Along with standard file metadata such as filename and size, the connector collects Teams-specific metadata fields including:
Metadata
Team and channel IDs and display names
Channel topics and archival status
Member lists, including inactive members
Conversation ID and conversation name
Conversation type (channel or chat)
Message reactions and emoji history
Attachment metadata
This metadata allows teams to reconstruct communication timelines and identify key participants in Teams conversations.
How Microsoft Teams Data Collection Works
The connector simplifies GitHub data collection through a structured workflow.
Add Microsoft Teams as a data source
The connector simplifies Teams data collection through a structured workflow.
Authenticate the connection
Connect using your authorized connection credentials. You can switch accounts at this stage if needed.
Configure the collection
Define collection settings including:
- Collection name
- Sync mode (one-time or auto-syns and archive)
- Start date, or start and end date for one-time syncs
Select content types
Choose whether to include Channels, Chats, or both in your collection.
Add users
Add the users to include in your collection by manually entering email addresses or loading users from a list or CSV file. You can also choose to sync newly created users automatically.
Select teams and channels
Specify which teams and channels to collect from. You can collect all data for selected users or drill down to specific workspaces, channels, and chats. Choose whether to sync newly created teams and channels going forward.
Start sync
Once configuration is complete, the Teams collection begins and data appears within your Onna workspace.
Microsoft Teams Data Collection Option
The Onna + Microsoft Teams Enterprise Connector supports flexible sync modes depending on investigation needs.
One-Time Sync
A targeted collection used for litigation or investigations with a defined date range.
Auto-Sync & Archive
Automatically collects new messages, files, users, teams, and channels as they appear in Microsoft Teams, and captures edits and deletions to previously collected messages.
Common Microsoft Teams eDiscovery Use Cases
Litigation Response
Collect Teams conversations relevant to legal matters quickly and defensibly.
Incident Response
Investigate communication patterns during cybersecurity or operational events.
Regulatory Compliance
Archive Teams communications to meet regulatory record retention requirements.
Internal Investigations
Identify messages, attachments, and participants related to incidents or policy violations across channels and chats.
%201.webp)
%201.webp){kind=logo}
%201.webp)
Onna + Microsoft Teams Enterprise Connector FAQs
Yes, with conditions. Onna can collect edits and deletions on messages it has already captured, as long as the source is set up in Auto-sync and archive mode. This is made possible through Onna's own tracking, as the Microsoft Teams API does not natively capture revisions.
Yes. Onna supports custodian-based collections where you define which users to include. You can also drill down to specific workspaces, channels, and chats within each user's account.
Yes, if you opt in during configuration. You can choose to sync newly created users and newly created teams and channels as part of your ongoing collection.
The minimum role required is Privileged Role Administrator, which can consent to the organization-wide Graph API access Onna requires. A Global Administrator or any role with greater privileges will also work.
Onna can collect data from blocked users who still have an active license.
Yes. Onna maintains a comprehensive audit log of all preservations, collections, and user actions. Every collection has a documented chain of custody.
Immediately. Onna indexes data in real time at ingestion, so collected Teams data is searchable as soon as it's pulled in.
Start Collecting Microsoft Teams Enterprise Data for eDiscovery
Connect Microsoft Teams Enterprise in minutes and begin collecting messages, channels, and collaboration data across your organization.