Forum Discussion
Sfb Admin Delegation
Hi Ryan,
Unfortunately, this is a frustration which many large organizations have known all too well. These types of organizations (including the one I work for) have tiered levels of support, each with different support responsibilities. While we have had no trouble creating the RBAC permissions for the different support tiers in our on prem environment using Skype for Business Server 2015, the same type of granular permissions do not currently exist in Skype for Business Online, so the only options are to grant the full "Skype for Business administrator" role to those lower support tiers, which we are also not comfortable doing, as there are tenant-level settings within the portal which I am not comfortable with them seeing, or to not grant them any permissions, thereby forcing the top-tier support team to perform functions as mundane as assigning phone numbers.
RBAC permissions for Skype for Business Online has been a request from many within the community for quite some time. With the upgrade and consolidation of the Skype for Business Admin Center into the Teams & Skype Admin Center, I am sincerely hoping we will eventually see the implementation of proper RBAC permissions as well. This is something which has been available in Exchange Online for years already, but has just not come to Skype for Business Online yet.
This was understandable when the Skype for Business Admin Center had just a few tenant-level permissions available for configuration, but with phone number provisioning now there as well, our organization of over 30,000 users cannot easily be managed by a team of 5 top-tier support staff responsible for Skype for Business if they need to also spend the time to assign phone numbers all day long.
Hi Alexander,
Thanks for the reply, sounds like we're in the same boat. We went from On-Prem Sfb and now dealing with Sfb Online.. well now Teams & Skype, I really hope there is some granularity for RBAC shortly, I've asked my TAM for a timeline (which I will post here) as there seems as a bunch of customers are after this not only for compliance but to apply least privilege to our support staff.
I found this link with alot of people requesting RBAC
https://office365.uservoice.com/forums/273493-office-365-admin/suggestions/32204950-allow-global-admin-to-create-custom-o365-managemen
Cheers
Ryan