Forum Discussion
JulienR1234
Jul 23, 2020Copper Contributor
Service Desk Permissions
Hi all
We have an outsourced service desk responsible for Joiners, Movers, Leavers. We need to allocate the minimum permissions possible to allocate a voice number (Direct Routing) to a user/remove a number from a leaver. MS tell us Global Admin! Anyone have an ideas please?
Thanks
Julien
Teams Communications Administrator would do the trick and be better than Teams Service Administrator but would still allow for manipulation of all call and meeting settings, one of which being dial plans.
I tried to get clever and give user admin access and Teams communication specialist, in the hope that I could get into the Teams Admin Centre and then be able to control a user and if I could, I would then see if it allowed me to assign an available number that way but no dice.
So we will have to wait for either new roles to come out or for custom permissions to become available so we can create our own custom roles to fit.You might want to also consider Azure AD PIM, so that someone is requesting a specific reason to elevate their rights and not just having elevated rights all of the time.
Thanks
Henry
- HenryPhillipsNimbitechBronze Contributor
Hi JulienR1234 ,
Blimey, not Global Admin I am sure.
I would look to the Teams specific roles and at worst case it would be Teams Service Administrator and at best one of the communication ones.
Thanks
Henry
- JulienR1234Copper Contributor
I know right, Global Admin. Guarantee though this is what support told us! Nearly fell off my chair.
Will give Teams Service Admin a try but even that might be too powerful for our needs but may just need to go with it. We really do only want to have them ability to manage the phone numbers, absolutely nothing else i.e. no dial plans and so on.
- HenryPhillipsNimbitechBronze Contributor
Teams Communications Administrator would do the trick and be better than Teams Service Administrator but would still allow for manipulation of all call and meeting settings, one of which being dial plans.
I tried to get clever and give user admin access and Teams communication specialist, in the hope that I could get into the Teams Admin Centre and then be able to control a user and if I could, I would then see if it allowed me to assign an available number that way but no dice.
So we will have to wait for either new roles to come out or for custom permissions to become available so we can create our own custom roles to fit.You might want to also consider Azure AD PIM, so that someone is requesting a specific reason to elevate their rights and not just having elevated rights all of the time.
Thanks
Henry
Hi, a Teams Service Administrator should be sufficient for this. Take a look at https://docs.microsoft.com/en-us/microsoftteams/getting-phone-numbers-for-your-users#:~:text=Using%20the%20Microsoft%20Teams%20admin%20center,-You%20must%20be&text=Go%20to%20the%20Microsoft%20Teams,order%20and%20add%20a%20description.