Teams Connector post a message to a user ERROR: The tenant admin disabled this bot (JUL2020)

(0) Share

Report

Posted on by m3ngi3

725

Hi all!

So we have a Flow that posts messages as the Flow Bot (to Users and to Channels as well as simple posts and adaptive cards).

The Flow has been running fine for a few weeks now but suddenly yesterday morning this error appeared:

Request to the Bot framework failed with error: '{"error":{"code":"BotDisabledByAdmin","message":"The tenant admin disabled this bot"}}'.

The Flow run only fails for a specific user (thus far a single user) because other Flow Runs of other users (before and after his requests) have run / are still running fine. Thus even if a tenant admin would have changed anything (which we are pretty sure did not happen), the error should appear to everyone and not only for this specific user right??

Troubleshooting steps thus far:

Resubmit existing flow on (SharePoint) items that had a first fail for this user -->
- same error on existing item and existing flow for this user
Let user submit a new request -->
- same error on new item and existing flow for this user
Create new flow with a simple post -->
- same error on existing item and new flow for this user
- same error on new item and new flow for this user
For every other user in the scenario's above the connector works fine
for other experience community members with the Flow Bot: this user has not blocked the Flow Bot 😉

Categories:

Using connectors

I have the same question (0)

All responses (4)

Answers (1)

Rohit Sharma354 on at

Like (1)

Report

Hello,

This can mostly due to Teams app permission policies.

If there is a policy where "Custom apps" is turned off, that means they cannot message the app and the app cannot message them.

https://docs.microsoft.com/en-us/microsoftteams/teams-app-permission-policies

Below document covers how to assign policy to the individual user:
https://docs.microsoft.com/en-us/microsoftteams/assign-policies

I can also see that you already opened a Support Ticket with Microsoft, so if above articles does not help, then you should hear back some more information from the Support Agent.

Hope this helps !

Was this reply helpful? Yes No
m3ngi3 725 on at

Like (0)

Report

Thank you @rohsh354 for the info!

I never heard of assigning Teams Policies to individual users. Our Tenant Admins are pretty secure on administering these kind of changes (because all kind of ISO / Cloud certifications) so I trust them when they say nothing changed during the period this issue started occuring for this particular user (other users are not affected), but I will let them double check on this to make sure this user does not have an individual policy 👍

Wil definitely post the outcome of the MS support ticket!

Was this reply helpful? Yes No
Verified answer

m3ngi3 725 on at

Like (1)

Report
So @rohsh354 , based on your info we did a double check and found a Teams - App permissions policy on this specific user: App Testers Policy.
The Org-wide default policy had restrictions to Block specific apps.
The App Testers policy had settings to Allow all.

So just to be very clear: the custom policy allows more than the default policy --> the users under the default policy had no issues, the users under the custom policy can not receive Flow Bot Posts.

As a test I asked the admins to remove users from the custom policy (without changing anything in the policy settings), wait 10 minutes and readd them again to the custom policy --> now Flows continue fine for all users!!! Mind blowing right 🤯

So apparently Microsoft did something past weekend that made Custom Teams Policies go berserk??

Was this reply helpful? Yes No
Rohit Sharma354 on at

Like (1)

Report

Hello @Django

Good to know that its working again !

I am not aware of any changes, which can cause this (specially for a single user). Additionally, it has touch points with Teams platform so, I am not sure if anything else cause this behavior.

Was this reply helpful? Yes No