Additional meeting and call-related features and issues within Microsoft Teams for business
Hello @Oliver Gritz,
Thank you for sharing the update.
Since Otter still appears embedded despite removing the account and app, the issue likely persists due to residual permissions and assignments in Microsoft Entra. Please follow these advanced steps to fully revoke Otter’s access:
Step 1: Remove User Consent via Microsoft Graph PowerShell
Before starting, install the Microsoft Graph PowerShell SDK: Install the Microsoft Graph PowerShell SDK | Microsoft Learn
Open PowerShell and run:
Connect-MgGraph -Scopes "Application.ReadWrite.All", "Directory.ReadWrite.All", "DelegatedPermissionGrant.ReadWrite.All", "AppRoleAssignment.ReadWrite.All"
Get the Service Principal for Otter using its Object ID:
$sp = Get-MgServicePrincipal -ServicePrincipalId "<objectID>"
(Find Object ID in Microsoft Entra Admin Center > Enterprise Applications > Otter > Overview.)
Remove all delegated permissions:
$spOAuth2PermissionsGrants = Get-MgOauth2PermissionGrant -All | Where-Object { $_.clientId -eq $sp.Id }
$spOAuth2PermissionsGrants | ForEach-Object {
Remove-MgOauth2PermissionGrant -OAuth2PermissionGrantId $_.Id
}
Remove all application permissions:
$spApplicationPermissions = Get-MgServicePrincipalAppRoleAssignment -ServicePrincipalId $sp.Id -All | Where-Object { $_.PrincipalType -eq "ServicePrincipal" }
$spApplicationPermissions | ForEach-Object {
Remove-MgServicePrincipalAppRoleAssignedTo -ServicePrincipalId $sp.Id -AppRoleAssignmentId $_.Id
Step 2: Remove All User and Group Assignments
$sp = Get-MgServicePrincipal -ServicePrincipalId "<objectID>"
$spApplicationPermissions = Get-MgServicePrincipalAppRoleAssignedTo -ServicePrincipalId $sp.Id -All | Where-Object { $_.PrincipalType -eq "ServicePrincipal" }
$spApplicationPermissions | ForEach-Object {
Remove-MgServicePrincipalAppRoleAssignment -ServicePrincipalId $_.PrincipalId -AppRoleAssignmentId $_.Id
Step 3: Disable Sign-In for Otter
In Microsoft Entra Admin Center:
- Go to Enterprise Applications > Otter > Properties.
- Set Enabled for users to sign in to No.
These steps will completely revoke Otter’s permissions and prevent it from accessing Teams or Outlook.
If you need assistance running these commands or confirming the Object ID, please let us know, we’re happy to guide you further.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.