Grafana Cloud

Microsoft Teams integration for Grafana IRM

The Microsoft Teams integration for Grafana IRM enables you and your team to respond to alert groups and manage incidents without leaving Microsoft Teams. Alert group notifications include interactive cards with Acknowledge, Resolve, and Silence buttons. For incidents, the integration creates dedicated threads, tracks the timeline of events, and lets you manage the incident lifecycle using the Grafana IRM bot.

Before you begin

To use the Microsoft Teams integration, you need:

  • Microsoft Teams owner or admin permissions
  • Ability to approve org-wide app deployment in Teams
  • Admin permissions in Grafana IRM (chatops:update-settings permission is required)

Note

The Grafana Microsoft Teams app uses org-wide deployment and requires permission to access your Microsoft Teams to deploy the Teams bot.

Configure the Microsoft Teams integration

  1. Navigate to IRM > Integrations in the Grafana Cloud main menu
  2. Select the Apps tab
  3. Click the Microsoft Teams tile
  4. Click Install Integration
  5. When redirected to Microsoft Teams, enter your credentials if prompted
  6. Review the Grafana IRM app and requested permissions, then click Accept
  7. Follow the prompts in Teams to allow Grafana IRM to access your Microsoft Teams
  8. Configure the integration settings:
    • Select a Team
    • Select a default channel for incident posts and thread creation
    • Choose which incident types to announce (drill incidents, non-drill incidents, or both)

Once redirected back to Grafana IRM, the Microsoft Teams workspace is connected for incident notifications.

Customize incident thread settings

After you install the integration, new incidents are announced in your designated Microsoft Teams channel. The incident thread stays up to date throughout the incident lifecycle.

You can customize the following settings:

  • Team and channel selection: Specify where incident announcements should be posted
  • Incident types: Choose which types of incidents are announced (drill, non-drill, or both)
  • Important incident updates: Enable or disable “Post important items to the thread”

When important updates are enabled, the following activities are automatically shared in the incident thread:

Activity typeUpdates shared
IncidentCreated, Closed, Start, End, Title changed, Severity changed, Status changed, Summary
RoleAssigned (Commander), Assigned (Investigator)
LabelAdded, Removed
ActionRun
SiftSuggestion
DataQuery
UserNote
TaskCompleted

Alert group notifications

When an alert group is routed to Microsoft Teams, Grafana IRM posts an adaptive card to the linked channel or your direct message. Each card displays the alert group status, title, source integration, and a link to view the alert group in IRM.

Interactive card actions

Alert group cards include action buttons you can use directly in Teams without opening Grafana:

ButtonDescription
Acknowledge / UnacknowledgeAcknowledge or revert acknowledgment of the alert group
Resolve / UnresolveResolve or reopen the alert group
Silence / UnsilenceSilence the alert group for 1, 4, 12, or 24 hours, indefinitely, or remove an existing silence
Declare incidentOpen the incident declaration flow in Grafana IRM for this alert group

The card status and buttons update automatically as the alert group state changes.

Note

Interactive card buttons only work when your Microsoft Teams account is linked to your Grafana IRM account. If your account isn’t linked, clicking a button returns an error. Each user must complete this step individually. It’s separate from the organization-level integration setup.

To link your account:

  1. In Grafana Cloud, click your avatar and open your Profile.

  2. Select the IRM tab.

  3. Click MS Teams connection.

  4. Copy the generated link code.

  5. In Microsoft Teams, open a direct message with the Grafana IRM bot.

  6. Send the following command, replacing <CODE> with the code you copied:

    text
    linkUser <CODE>

Once linked, you can acknowledge, resolve, and silence alert groups directly from Teams cards.

Bot commands for alert groups

Send the following commands to the Grafana IRM bot. Use linkUser in a direct message and linkTeam in a channel.

CommandDescription
helpList available bot commands
linkUser <CODE>Link your Microsoft Teams account to your Grafana IRM user
linkTeam <CODE>Link a Microsoft Teams channel to your Grafana IRM stack for alert group notifications
unlink <STACK_SLUG>Unlink your Microsoft Teams account or team from a Grafana IRM stack

Incident bot commands

Use the following @Grafana IRM commands in Microsoft Teams to manage incidents:

CommandDescription
incident helpList all available commands
incident new something went wrongCreate a new incident
incident new <severity> "title"Create a new incident with specified severity
incident listList all active incidents
incident rolesSee who’s involved in the current incident
incident talkFind an online place to discuss the incident
incident statusGet a live inline status update
incident severity majorUpdate incident severity to major
incident tasksCreate, assign, and manage tasks
incident tasks helpGet more information about tasks
incident tasks add 'deploy new release'Add a new task
incident tasks add 'deploy new release' @bobAdd a task and assign to @bob
incident tasks listView current tasks
incident notesAdd and view incident notes
incident notes helpGet more information about notes
incident notes add "customer is aware"Add a new note
incident notes listView current notes
incident stacksList Grafana stacks
incident stack <stack-name>Set default stack for new incidents

Required permissions

The Grafana IRM app requires the following permissions in Microsoft Teams:

Workspace access permissions

PermissionPurpose
Read and write channel names, descriptions, and settingsRead channel settings where the bot is installed
Allow the Teams app to manage itself for all teamsAllow the Grafana IRM bot to self-install
Read all teams’ settingsAccess Team settings and information
Read all users’ full profilesFetch profile data like Teams handlers and avatars
Read contacts in all mailboxesFind users by email and match accounts between Grafana and Teams

Channel access permissions

PermissionPurpose
Receive messages mentioning the botAccess messages directed at the bot
Send channel notificationsSend notifications to the designated channel
Access Team InformationAccess team and channel names, roster details

Message and conversation permissions

PermissionPurpose
Receive messagesProcess messages mentioning the bot
Send messagesSend notifications within incident channels
Access user profile informationAccess basic profile details
Create Incident-specific ConversationsCreate new incident threads
View Direct MentionsView messages mentioning ‘@Grafana IRM’