SOLVED
Home

MSTeams PowerShell Module - Expected behavior?

%3CLINGO-SUB%20id%3D%22lingo-sub-274789%22%20slang%3D%22en-US%22%3EMSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-274789%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20cross-posted%20this%20question%20to%20Twitter%20for%20responses%20as%20well.%20Global%20Admin%20getting%20this%20%22access%20denied%22%20doesn't%20make%20much%20sense%20to%20me%2C%20looking%20for%20additional%20responses.%20As%20I%20mentioned%2C%20this%20is%20with%20my%20Global%20Admin%20account%20and%20it%20is%20not%20licensed%2C%20and%20in%20many%20real-life%20use%20cases%2C%20these%20privileged%26nbsp%3Baccounts%20do%20not%20get%20licensed%20while%20handling%20administrative%20duties%20as%20in%20SPO%2FODFB%2FExchange%20etc.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftwitter.com%2Falisalih%2Fstatus%2F1052646355154464768%3Fs%3D20%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftwitter.com%2Falisalih%2Fstatus%2F1052646355154464768%3Fs%3D20%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-274789%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdministration%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eglobal%20admin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Emodule%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPowerShell%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-293796%22%20slang%3D%22en-US%22%3ERe%3A%20MSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-293796%22%20slang%3D%22en-US%22%3EThe%20new%20version%20of%20the%20module%20seems%20to%20address%20the%20license%20requirement%20behavior.%20%3CA%20href%3D%22https%3A%2F%2Foffice365itpros.com%2F2018%2F11%2F30%2Fteams-upgrades-powershell-module-to-0-9-6%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foffice365itpros.com%2F2018%2F11%2F30%2Fteams-upgrades-powershell-module-to-0-9-6%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275447%22%20slang%3D%22en-US%22%3ERe%3A%20MSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275447%22%20slang%3D%22en-US%22%3E%3CP%3E%2B1%20on%20what%20Vasil%20mentioned.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F89625%22%20target%3D%22_blank%22%3E%40Isabella%20Lubin%3C%2FA%3E%26nbsp%3B-%20After%20Vasil's%20note%20that%20his%20GA%20account%20without%20a%20license%20can%20run%20the%20cmdlet%2C%20I%20double%20checked%20everything.%3C%2FP%3E%3CUL%3E%3CLI%3EClean%20install%20of%200.9.5%20-%20Check%3C%2FLI%3E%3CLI%3EVerified%20no-license%20in%20Admin%20Center%20-%20Check%3C%2FLI%3E%3CLI%3ERe-run%20the%20cmdlet%20and%20generated%20the%20error%26nbsp%3B-%20Check%3C%2FLI%3E%3C%2FUL%3E%3CP%3EIf%20needed%2C%20I%20can%20provide%20a%20Correlation%20ID%20as%20well%20to%20help%20troubleshoot%20the%20discrepancy.%20Just%20let%20me%20know.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F89625%22%20target%3D%22_blank%22%3E%40Isabella%20Lubin%3C%2FA%3E%26nbsp%3Band%20Thanks%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275440%22%20slang%3D%22en-US%22%3ERe%3A%20MSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275440%22%20slang%3D%22en-US%22%3E%3CP%3ERight%2C%20thanks%20%3A)%3C%2Fimg%3E%20I%20can%20tell%20you%20that%20a%20license%20requirement%20will%20not%20go%20well%20with%20any%20large%20organization%2C%20with%20very%20few%20exceptions%20all%20admin%20functionalities%20across%20M365%20do%20not%20require%20license.%20Should%20you%20decide%20to%20enforce%20such%20requirement%2C%20please%20make%20sure%20to%20communicate%20this%20well%20in%20advance!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275435%22%20slang%3D%22en-US%22%3ERe%3A%20MSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275435%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3Ereplying%20here%20as%20well%20since%20I'm%20also%20the%20person%20on%20twitter.%26nbsp%3B%20Requiring%20a%20license%20is%20an%20API%20requirement%20so%20this%20is%20technically%20by%20design%20-%20we%20should%20have%20been%20enforcing%20it%20via%20PowerShell%20as%20well.%26nbsp%3B%20There%20are%20two%20things%20that%20are%20happening%20in%20motion%3A%3C%2FP%3E%0A%3CP%3E1.%20Evaluating%20whether%20we%20should%20remove%20this%20restriction%20for%20admins%20due%20to%20the%20great%20feedback%20here%20and%20in%20other%20forums%3C%2FP%3E%0A%3CP%3E2.%20Investigating%20the%20inconsistent%20enforcement%20that%20you%20described%20here.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275422%22%20slang%3D%22en-US%22%3ERe%3A%20MSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275422%22%20slang%3D%22en-US%22%3E%3CP%3EWell%20I%20might%20be%20getting%20old%2C%20but%20I'm%20not%20blind%20yet%20%3A)%3C%2Fimg%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F57757i6D2EB65924E27EDA%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22TeamsGA.png%22%20title%3D%22TeamsGA.png%22%20%2F%3E%3C%2FSPAN%3ELet%20me%20check%20directly%20with%20the%20powers%20that%20be.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275188%22%20slang%3D%22en-US%22%3ERe%3A%20MSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275188%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BThat's%20quite%20interesting%2C%20can%20you%20make%20sure%20you%20don't%20have%20a%20license%20on%20the%20GA%20account%20for%20me%3F%20The%20reason%20I%20ask%20you%20to%20do%20that%20is%3B%20The%20program%20manager%20has%20confirmed%20the%20behavior%20and%20asked%20me%20to%20enter%20a%20uservoice%20entry%20for%20it%2C%20which%20I%20did.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmicrosoftteams.uservoice.com%2Fforums%2F555103-public%2Fsuggestions%2F35756989-non-licensed-global-admin-service-admin-accounts%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmicrosoftteams.uservoice.com%2Fforums%2F555103-public%2Fsuggestions%2F35756989-non-licensed-global-admin-service-admin-accounts%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275187%22%20slang%3D%22en-US%22%3ERe%3A%20MSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275187%22%20slang%3D%22en-US%22%3EYes%2C%20I%20made%20sure%20that's%20the%20case.%20It%20is%20definitely%200.9.5%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275139%22%20slang%3D%22en-US%22%3ERe%3A%20MSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275139%22%20slang%3D%22en-US%22%3E%3CP%3EWorks%20just%20fine%20here%20with%20unlicensed%20GA%20account.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275136%22%20slang%3D%22en-US%22%3ERe%3A%20MSTeams%20PowerShell%20Module%20-%20Expected%20behavior%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275136%22%20slang%3D%22en-US%22%3E%3CP%3EI%20know%20there%20were%20some%20issues%20they%20upgraded%20the%20powershell%20module%20to%200.95%20so%20be%20aware%20you%20have%20the%20latest%20Powershell%20module.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Hi, 

 

I cross-posted this question to Twitter for responses as well. Global Admin getting this "access denied" doesn't make much sense to me, looking for additional responses. As I mentioned, this is with my Global Admin account and it is not licensed, and in many real-life use cases, these privileged accounts do not get licensed while handling administrative duties as in SPO/ODFB/Exchange etc.

 

https://twitter.com/alisalih/status/1052646355154464768?s=20

9 Replies

I know there were some issues they upgraded the powershell module to 0.95 so be aware you have the latest Powershell module.

Works just fine here with unlicensed GA account.

Yes, I made sure that's the case. It is definitely 0.9.5
Highlighted

@Vasil Michev That's quite interesting, can you make sure you don't have a license on the GA account for me? The reason I ask you to do that is; The program manager has confirmed the behavior and asked me to enter a uservoice entry for it, which I did.

 

https://microsoftteams.uservoice.com/forums/555103-public/suggestions/35756989-non-licensed-global-a...

 

Well I might be getting old, but I'm not blind yet :)

 

TeamsGA.pngLet me check directly with the powers that be.

@Vasil Michev replying here as well since I'm also the person on twitter.  Requiring a license is an API requirement so this is technically by design - we should have been enforcing it via PowerShell as well.  There are two things that are happening in motion:

1. Evaluating whether we should remove this restriction for admins due to the great feedback here and in other forums

2. Investigating the inconsistent enforcement that you described here.

Right, thanks :) I can tell you that a license requirement will not go well with any large organization, with very few exceptions all admin functionalities across M365 do not require license. Should you decide to enforce such requirement, please make sure to communicate this well in advance!

+1 on what Vasil mentioned.

@Isabella Lubin - After Vasil's note that his GA account without a license can run the cmdlet, I double checked everything.

  • Clean install of 0.9.5 - Check
  • Verified no-license in Admin Center - Check
  • Re-run the cmdlet and generated the error - Check

If needed, I can provide a Correlation ID as well to help troubleshoot the discrepancy. Just let me know. 

 

Thanks @Isabella Lubin and Thanks @Vasil Michev 

Solution
The new version of the module seems to address the license requirement behavior. https://office365itpros.com/2018/11/30/teams-upgrades-powershell-module-to-0-9-6/
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
22 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
cntvertex in Discussions on
13 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
28 Replies