Client Credentials

Client credentials create app-only tokens.

Appropriate use

Use app-only tokens only for Graph operations whose permissions explicitly support application access.

Not for normal message sends

Normal live Teams chat and channel message posting requires delegated auth. The CLI rejects app-only tokens before mutating message commands so agents receive deterministic PERMISSION_DENIED errors.

teams auth login --client-credentials --client-id <id> --client-secret <secret> --tenant-id <tenant>

For unattended posting, use future Teams bot mode.