In this article I would like to take a closer look at the different Microsoft Teams Admin roles.

 

My experience on the “Battlefield” is that during the project phase or shortly afterwards, the question always comes up: “What authorisation do I have to assign to the various support organisations?

It is important to consider the following:

 

Microsoft 365 provides various preconfigured administrative role groups so that selected users can receive elevated access to administrative tasks within the Office 365 services. The role groups are assigned through different portals, such as the Microsoft 365 Admin Center, the Azure portal, and PowerShell.

Several administrative roles have full access to all of the Teams’ service settings, such as the Global Administrator and the Teams admin. Other roles only provide access to certain parts of Microsoft Teams to perform recurring tasks, such as troubleshooting call quality problems and managing telephony settings.

The specialized Teams admin roles include:

Teams Administrator
Teams Device Administrator
Teams Communications Administrator
Teams Communications Support Engineer
Teams Communications Support Specialist

 

Note

Even if Teams consists of different workloads from Office 365, the team-specific administrator roles do not grant permissions to other services, such as Exchange Online or SharePoint in Microsoft 365.

 

Teams roles and capabilities

The following table identifies the tasks that each role can perform, and the tools the administrator can use in the Microsoft Teams Admin Center and in PowerShell.

 

Role Can do these tasks Can access the following tools
Teams Administrator Manage the Teams service, and manage and create Microsoft 365 Groups. Everything in the Microsoft Teams admin center and associated PowerShell controls, including:

– Manage meetings, including meeting policies, configurations, and conference bridges.

– Manage voice, including calling policies and phone number inventory and assignment.

– Manage messaging, including messaging policies.

– Manage all org-wide settings, including federation, teams upgrade, and teams client settings.

– Manage the teams in the organization and their associated settings, including membership (group management supported via PowerShell, team management in the Teams admin center).

– Manage Teams-certified devices and set up and assign configuration policies.

– View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset.

– Access all reports in the Microsoft Teams admin center

– Access, monitor, and troubleshoot tenant’s call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users impacted by poor call quality. Create new call quality reports, update, and remove call quality reports as needed. Upload and update CQD building data.

– Publish apps to the tenant app catalog in the Microsoft Teams admin center
Teams Device Administrator Manage devices configured for use with the Teams service. Manage device configuration and updates, review device health and status of connected peripherals, set up and apply configuration profiles, and restart devices.

The Teams Device Administrator role doesn’t provide access to call quality data or call analytics. To view call quality data or call analytics, you need to be assigned the Teams Communications Administrator role.

 
Teams Communications Administrator Manage calling and meetings features within the Teams service. Manage meetings, including meeting policies, configurations, and conference bridges.

Manage voice, including calling policies and phone number inventory and assignment.

View user profile page and troubleshoot user call quality problems using the advanced troubleshooting toolset.

Access the Teams PSTN blocked users report, PSTN minute pools report, and PSTN usage report in the Microsoft Teams admin center.

Access, monitor, and troubleshoot tenant’s call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality. Create new call quality reports, update, and remove call quality reports as needed. Upload and update CQD building data.
Teams Communications Support Engineer Troubleshoot communications issues within Teams by using advanced tools. View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset.

Access, monitor, and troubleshoot tenant’s call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality.
Teams Communications Support Specialist Troubleshoot communications issues within Teams by using basic tools. Access user profile page for troubleshooting calls in Call Analytics. Can only view user information for the specific user being searched for.

Access, monitor, and troubleshoot tenant’s call quality and reliability using data exposed in Call Quality Dashboard (CQD).

The Teams Administrator role in the Azure portal is the same role as the Teams service admin in the Microsoft 365 Admin Center. If you assign this role to a member in the Azure portal, you can also see it in the Microsoft 365 Admin Center (and vice versa).

 

I hope I have been able to provide some clarity with this article.

For more information and how admin roles can be assigned via the Microsoft 365 Admin Center, Microsoft offers a corresponding learning path.

In this specific case it is the module: Plan and deploy Microsoft Teams

 

This module is part of my recommended learning path to Microsoft certification MS-700.

Exam MS-700: Managing Microsoft Teams – Certifications | Microsoft Learn

 

 

Post Views: 2,080