Authorization on Teams Bot

[robertobandeira]

So I developed this bot for my company that has a few features to make the employees' lives easier. But some of these features should only be accessible for a few of the employees. Is there anyway you would recommend doing this sort of authorization (checking if the user has access to the feature) without the need for a log in action?

I was thinking of using the "message.From.Id" attribute when the user sends his first message to see if that user in on an authorized-user-list, but I'm not 100% sure if this ID is unique and if it doesn't change over time. Any suggestions or insights?

[RamjotSingh]

Message.From.Id is unique per bot per user. So if you change your bot it will change. But otherwise on per-bot basis its constant and won't change.