Add a GetTeamByID API to lookup a team by ID (#4811)

Allows the caller to get Team information if they know a group is a team.

---

#### Does this PR need a docs update or release note?

- [ ] ✅ Yes, it's included
- [ ] 🕐 Yes, but in a later PR
- [x] ⛔ No

#### Type of change

<!--- Please check the type of change your PR introduces: --->
- [x] 🌻 Feature
- [ ] 🐛 Bugfix
- [ ] 🗺️ Documentation
- [ ] 🤖 Supportability/Tests
- [ ] 💻 CI/Deployment
- [ ] 🧹 Tech Debt/Cleanup

#### Issue(s)

<!-- Can reference multiple issues. Use one of the following "magic words" - "closes, fixes" to auto-close the Github issue. -->
* #<issue>

#### Test Plan

<!-- How will this be tested prior to merging.-->
- [ ] 💪 Manual
- [x] ⚡ Unit test
- [ ] 💚 E2E

src/pkg/services/m365/api/groups.go

@@ -101,6 +101,27 @@ const (
 	filterGroupByMailQueryTmpl        = "proxyAddresses/any(a:a eq 'smtp:%s')"
 )
 
+// GetTeamByID can lookup a team by its group id. It will fail if the group
+// is not a Team.
+func (c Groups) GetTeamByID(
+	ctx context.Context,
+	identifier string,
+	_ CallConfig, // matching standards
+) (models.Teamable, error) {
+	ctx = clues.Add(ctx, "resource_identifier", identifier)
+
+	t, err := c.Stable.Client().Teams().ByTeamId(identifier).Get(ctx, nil)
+	if err != nil {
+		if graph.IsErrResourceLocked(err) {
+			return nil, graph.Stack(ctx, clues.Stack(graph.ErrResourceLocked, err))
+		}
+
+		return nil, graph.Wrap(ctx, err, "finding team by ID")
+	}
+
+	return t, err
+}
+
 // GetID can look up a group by either its canonical id (a uuid)
 // or by the group's display name.  If looking up the display name
 // an error will be returned if more than one group gets returned

src/pkg/services/m365/api/groups_test.go

@@ -107,6 +107,17 @@ func (suite *GroupsIntgSuite) TestGetAll() {
 	require.NotZero(t, len(groups), "must have at least one group")
 }
 
+func (suite *GroupsIntgSuite) TestGetTeamByID() {
+	t := suite.T()
+
+	ctx, flush := tester.NewContext(t)
+	defer flush()
+
+	team, err := suite.its.ac.Groups().GetTeamByID(ctx, suite.its.group.id, CallConfig{})
+	require.NoError(t, err, "getting team by ID")
+	require.NotNil(t, team, "must have valid team")
+}
+
 func (suite *GroupsIntgSuite) TestGetAllSites() {
 	t := suite.T()
 
@@ -238,6 +249,9 @@ func (suite *GroupsIntgSuite) TestGroups_GetByID_mockResourceLockedErrs() {
 				interceptV1Path("groups").
 					Reply(403).
 					JSON(graphTD.ParseableToMap(t, err))
+				interceptV1Path("teams").
+					Reply(403).
+					JSON(graphTD.ParseableToMap(t, err))
 			},
 		},
 		{
@@ -249,6 +263,9 @@ func (suite *GroupsIntgSuite) TestGroups_GetByID_mockResourceLockedErrs() {
 				interceptV1Path("groups", gID).
 					Reply(403).
 					JSON(graphTD.ParseableToMap(t, err))
+				interceptV1Path("teams", gID).
+					Reply(403).
+					JSON(graphTD.ParseableToMap(t, err))
 			},
 		},
 		{
@@ -266,6 +283,9 @@ func (suite *GroupsIntgSuite) TestGroups_GetByID_mockResourceLockedErrs() {
 				interceptV1Path("groups", gID).
 					Reply(403).
 					JSON(graphTD.ParseableToMap(t, err))
+				interceptV1Path("teams", gID).
+					Reply(403).
+					JSON(graphTD.ParseableToMap(t, err))
 			},
 		},
 	}
@@ -280,10 +300,16 @@ func (suite *GroupsIntgSuite) TestGroups_GetByID_mockResourceLockedErrs() {
 
 			test.setup(t)
 
+			// Verify both GetByID and GetTeamByID APIs handle this error
 			_, err := suite.its.gockAC.
 				Groups().
 				GetByID(ctx, test.id, CallConfig{})
 			require.ErrorIs(t, err, graph.ErrResourceLocked, clues.ToCore(err))
+
+			_, err = suite.its.gockAC.
+				Groups().
+				GetTeamByID(ctx, test.id, CallConfig{})
+			require.ErrorIs(t, err, graph.ErrResourceLocked, clues.ToCore(err))
 		})
 	}
 }