Team whereabouts Leave planner Work planning Desk booking Parking booking Meeting room booking Visitor booking Schengen tracking
Pricing About us Get in Touch Support Case studies Solutions Blog
Log In

Support/Microsoft Teams and Azure/Microsoft profile photos

Microsoft profile photos

Last updated

Show each person's Microsoft 365 profile photo in Team Today instead of their initials.

Team Today copies the photos from Microsoft 365 once a week. To do this it needs one read-only permission, which a Microsoft admin approves once for your organisation.

You'll find the setting in Settings > Company settings > Azure configuration, in the Microsoft profile photos section. In Microsoft Teams, use the Management tab. Only company admins can change it.

Before you start

  • A Global Administrator or Privileged Role Administrator in Microsoft Entra ID needs to approve the permission. This can be your IT admin. See If you aren't a Global Administrator.
  • Your Azure Tenant ID must be filled in on the Azure configuration tab. You'll find it on the Overview page of the Microsoft Entra admin centre.

Turn on profile photos

  1. Go to Settings > Company settings > Azure configuration and check that the Azure Tenant ID field is filled in. If it's empty, enter your tenant ID first.
  2. Switch on Microsoft profile photos. The section shows Access not granted yet.
  3. Select Grant access in Microsoft. Microsoft opens a consent page for an app called Team Today Profile Photos. It asks for one permission, Read all profile photos (ProfilePhoto.Read.All in Microsoft Graph). Sign in as a Global Administrator or Privileged Role Administrator and accept it.
  4. In the web app, Microsoft then takes you back to the Azure configuration tab. In the Microsoft Teams app, the consent page opens in a pop-up window, and you return to Team Today when it closes.
  5. The section now shows Access granted and Team Today starts copying the photos straight away. People see the photos the next time they load Team Today. If it still says Access not granted yet, wait a minute and select Check again. Microsoft can take a short while to record the approval.

Once access is granted, the section shows how many people have a photo and when Team Today last updated them, for example "42 of 50 people have a photo." Until the first copy has finished it says "Photos have not been copied yet."

If you aren't a Global Administrator

The permission is an application permission for Microsoft Graph, so only a Global Administrator or Privileged Role Administrator can approve it. Select Copy approval link and send the link to your IT admin. When they open it and approve, Microsoft shows a page saying access was granted. Then select Check again in Team Today, and the first copy starts. Or your IT admin can sign in to Team Today as a company admin and follow the steps themselves.

How it works

Team Today Profile Photos is a separate app from the main Team Today app. Approving it doesn't give Team Today access to calendars or anything else. It can only read profile photos. It can't change them.

Team Today copies a small 96 x 96 pixel version of each photo and stores it. It updates the copies once a week, early on Sunday morning (UK time). A photo changed in Microsoft 365 shows in Team Today within a week, or straight away if you select Update now. You can use Update now once every 10 minutes.

Team Today matches people by their Microsoft account. If it can't, it uses their email address, as long as it is the same as their Microsoft sign-in address (user principal name).

People with no photo in Microsoft 365 keep their initials. If someone removes their Microsoft photo, Team Today removes its copy at the next update.

Photos show in place of initials in most of Team Today, to people signed in to your company's Team Today. People see new photos the next time they load Team Today.

Switch it off or remove access

Switching off Microsoft profile photos deletes all the copied photos straight away, and initials come back. If you switch it back on, Team Today copies the photos again straight away, as long as access is still granted.

To remove the permission completely, a Microsoft admin can delete Team Today Profile Photos from Enterprise applications in the Microsoft Entra admin centre. Team Today then stops updating the photos. Switch the setting off in Team Today as well, to delete the copies it already has.

Troubleshooting

It says "Add your Azure Tenant ID on this page before granting access."

The Azure Tenant ID field on the Azure configuration tab is empty. Enter your tenant ID, then select Grant access in Microsoft.

Access was approved, but it still says "Access not granted yet"

Wait a minute and select Check again. If nothing changes, check that the approval was given in the same Microsoft tenant as the Azure Tenant ID in Team Today. This can happen if the admin who approved it looks after more than one tenant, such as a reseller.

Someone's photo is missing

  • They have no photo in Microsoft 365, so Team Today shows their initials.
  • Their email address in Team Today is different from their Microsoft sign-in address, and they have never signed in to Team Today with Microsoft. Team Today can't match them to a Microsoft account, so it has no photo to copy.
  • They added their photo after the last update. Select Update now, or wait for the weekly update.

An old photo is still showing

Team Today updates photos once a week. To pick up a change sooner, select Update now, then reload Team Today.

If you have any questions, contact us at support@team-today.com.