eSHARE Teams Bot Guide
The eSHARE Teams Bot integrates with Microsoft Teams to provide external users secure and compliant access to shared files. When users share Microsoft links in chats, the bot detects these links and creates Trusted Shares, applying organizational protection policies to ensure secure access. It supports automated governance, compliance enforcement, and real-time monitoring, helping organizations maintain data integrity and prevent accidental exposure of sensitive resources.
Installation (Teams Admin Center)
Though the Teams Bot is described as a monolithic service, it actually has two installable applications. The first is the bot itself (eShare Bot), which includes the Convert Links functionality. The second is a link unfurling application (eShare Link Conversion), which allows the bot to listen for and take action on native M365 links. Because link unfurling requires the enumeration of the domains that will trigger share creation, it is necessary that the unfurling app be customized by eSHARE for each organization installing the bot.
Customers must provide eSHARE with their OneDrive and SharePoint URLs, which will be used to create the manifest for the “eShare Link Conversion” application. For organizations using custom domains, the URLs should follow these formats:
OneDrive: https://<customdomain>-my.sharepoint.com
SharePoint: https://<customdomain>.sharepoint.com
Replace <customdomain> with the name of your organization’s custom domain as configured in your Microsoft 365 tenant. SharePoint administrators can retrieve the organization’s SharePoint URL by navigating to the SharePoint Admin Center, expanding the Sites section, and selecting Active sites. From there, click on any active site to open its details, the custom domain will be displayed in the information panel, as shown below:
To retrieve OneDrive URLs when a custom domain is used, the simplest method is to sign in to OneDrive Online as a user who has OneDrive provisioned. Once logged in, the browser’s address bar will display the organization’s OneDrive URL for the custom domain, as shown below:
Once prepared, both applications will be delivered to the customer and manually uploaded to the Microsoft Teams Admin Center by following the procedure outlined below.
Login to Microsoft Teams Admin Center, expand the “Teams apps” section and click on “Manage apps” to access the application management view. Expand the “Actions” menu and click on the “+ Upload new app” button to upload both applications. It is important to add the “eShare Bot” first, followed by the “eShare Link Conversion” application:
Once the upload is successful, both applications will appear under the “All apps” section:
If the “App status” displays as “Blocked” for any application, click on the application name to open its management page:
From the “Actions” menu in the top-right corner, select Unblock app to unblock the application:
Admins can restrict the use of the applications to specific users or groups by navigating to the “Users and groups” tab. Click “Edit availability”, and in the menu that appears, select “Specific” users or groups:
Administrators must grant consent for the required permissions to allow the eSHARE Bot application to perform all necessary actions. In the application details, go to the Permissions tab and click Grant admin consent under the Required permissions section:
To make the eSHARE Bot available for installation in the Teams client (web and desktop are supported), Teams Administrators must include both applications in an application setup policy under the Teams apps section. Navigate to Teams apps → Setup policies, and under Manage policies, select the policy where you want to include the applications:
In the Installed apps section, click + Add apps, then type “eshare” in the search field and add both the eSHARE Bot and eSHARE Link Conversion applications:
After adding both applications, make sure to save the changes to the setup policy.
Installation (Teams Client)
End users can install the “eSHARE Bot” application directly from the Teams client. The steps below apply to both the web and desktop versions of Teams.
While in the Teams client, click the + Apps button on the left sidebar. The eSHARE Bot application should appear under the Added by your org section. If it does not appear, type eshare in the search field and select the application from the results:
Users will need to provide consent the first time they insert a link into a Teams chat ( 1 to 1 chat or group chat) before the eSHARE Bot can secure the link as a Trusted Share. This consent request will be presented to the users in a new chat named “eShare Bot”. This chat will be used to notify end users about requests related to Trusted Shares generated by the bot. After consent is granted, users will be able to use the “eShare Bot” in Teams:
As soon as consent has been granted, Microsoft links that are inserted into a Teams chat will be automatically converted to Trusted Shares.
When a Microsoft link is inserted into a Teams chat, a Trusted Share is automatically created. Members of the chat can access the Trusted Share directly within the conversation. Once the Trusted Share is available, users receive an adaptive card that provides access either through the M365 app (if installed on the Teams client) or via the Cloud Web Portal:
Alternatively, Trusted Share owners can access their shares via the “My Shares” view in the Cloud Web Portal or through the “All Internal Shares” view in the eSHARE M365 application. Trusted Shares created by the Teams Bot will be named “Teams chat with…”, followed by the display names of the chat participants:
External recipients of these Trusted Shares can view and access them through the organization’s guest portal where the Trusted Share originates. They will find these shares under the “Shared with me” view:
