Forum Discussion

JulienR1234's avatar
JulienR1234
Copper Contributor
Jul 23, 2020
Solved

Service Desk Permissions

Hi all

 

We have an outsourced service desk responsible for Joiners, Movers, Leavers.  We need to allocate the minimum permissions possible to allocate a voice number (Direct Routing) to a user/remove a number from a leaver.  MS tell us Global Admin!  Anyone have an ideas please?

 

Thanks


Julien

  • JulienR1234 

     

    Teams Communications Administrator would do the trick and be better than Teams Service Administrator but would still allow for manipulation of all call and meeting settings, one of which being dial plans.

     

    I tried to get clever and give user admin access and Teams communication specialist, in the hope that I could get into the Teams Admin Centre and then be able to control a user and if I could, I would then see if it allowed me to assign an available number that way but no dice.

    So we will have to wait for either new roles to come out or for custom permissions to become available so we can create our own custom roles to fit.

     

    You might want to also consider Azure AD PIM, so that someone is requesting a specific reason to elevate their rights and not just having elevated rights all of the time.

     

    Thanks

     

    Henry

     
     
     

     

8 Replies

  • Hi JulienR1234 ,

     

    Blimey, not Global Admin I am sure.

     

    I would look to the Teams specific roles and at worst case it would be Teams Service Administrator and at best one of the communication ones.

     

    https://docs.microsoft.com/en-us/MicrosoftTeams/using-admin-roles#:~:text=Teams%20roles%20and%20capabilities%20%20%20%20Role,%20Manage%20meetings%2C%20including%20meeting%20polic%20...%20 

     

    Thanks

     

    Henry

    • JulienR1234's avatar
      JulienR1234
      Copper Contributor

      HenryPhillipsNimbitech 

       

      I know right, Global Admin.  Guarantee though this is what support told us!  Nearly fell off my chair.

       

      Will give Teams Service Admin a try but even that might be too powerful for our needs but may just need to go with it.  We really do only want to have them ability to manage the phone numbers, absolutely nothing else i.e. no dial plans and so on.

      • HenryPhillipsNimbitech's avatar
        HenryPhillipsNimbitech
        Bronze Contributor

        JulienR1234 

         

        Teams Communications Administrator would do the trick and be better than Teams Service Administrator but would still allow for manipulation of all call and meeting settings, one of which being dial plans.

         

        I tried to get clever and give user admin access and Teams communication specialist, in the hope that I could get into the Teams Admin Centre and then be able to control a user and if I could, I would then see if it allowed me to assign an available number that way but no dice.

        So we will have to wait for either new roles to come out or for custom permissions to become available so we can create our own custom roles to fit.

         

        You might want to also consider Azure AD PIM, so that someone is requesting a specific reason to elevate their rights and not just having elevated rights all of the time.

         

        Thanks

         

        Henry

         
         
         

         

Resources