SOLVED

Service Desk Permissions

Copper Contributor

Hi all

 

We have an outsourced service desk responsible for Joiners, Movers, Leavers.  We need to allocate the minimum permissions possible to allocate a voice number (Direct Routing) to a user/remove a number from a leaver.  MS tell us Global Admin!  Anyone have an ideas please?

 

Thanks


Julien

8 Replies

@JulienR1234 

 

Hi, a Teams Service Administrator should be sufficient for this.  Take a look at https://docs.microsoft.com/en-us/microsoftteams/getting-phone-numbers-for-your-users#:~:text=Using%2...

Hi @JulienR1234 ,

 

Blimey, not Global Admin I am sure.

 

I would look to the Teams specific roles and at worst case it would be Teams Service Administrator and at best one of the communication ones.

 

Teams Admin Roles 

 

Thanks

 

Henry

@HenryPhillipsNimbitech 

 

I know right, Global Admin.  Guarantee though this is what support told us!  Nearly fell off my chair.

 

Will give Teams Service Admin a try but even that might be too powerful for our needs but may just need to go with it.  We really do only want to have them ability to manage the phone numbers, absolutely nothing else i.e. no dial plans and so on.

Hi @JulienR1234 ,

 

I will see what else I can think of.

 

Maybe something along the lines of a PowerApp calling the Graph, as maybe there are more specific permissions that can be set that way.

 

Will see what I can find.

 

Thanks

 

Henry

best response confirmed by JulienR1234 (Copper Contributor)
Solution

@JulienR1234 

 

Teams Communications Administrator would do the trick and be better than Teams Service Administrator but would still allow for manipulation of all call and meeting settings, one of which being dial plans.

 

I tried to get clever and give user admin access and Teams communication specialist, in the hope that I could get into the Teams Admin Centre and then be able to control a user and if I could, I would then see if it allowed me to assign an available number that way but no dice.

So we will have to wait for either new roles to come out or for custom permissions to become available so we can create our own custom roles to fit.

 

You might want to also consider Azure AD PIM, so that someone is requesting a specific reason to elevate their rights and not just having elevated rights all of the time.

 

Thanks

 

Henry

 
 
 

 

@HenryPhillipsNimbitech Thanks Henry, appreciate you having done all that for us. Hopefully it's something MS look at, I'll look for and support (or log) a User Voice.

@JulienR1234 

 

Yes please do as if they could just allow for user admin and still access to the Teams admin centre, you get the option to assign available numbers from there, without even tapping into the Voice list of menu options.

 

Report back with whichever User Voice you go for and I will give it a vote.

 

Thanks

 

Henry

i will too!
1 best response

Accepted Solutions
best response confirmed by JulienR1234 (Copper Contributor)
Solution

@JulienR1234 

 

Teams Communications Administrator would do the trick and be better than Teams Service Administrator but would still allow for manipulation of all call and meeting settings, one of which being dial plans.

 

I tried to get clever and give user admin access and Teams communication specialist, in the hope that I could get into the Teams Admin Centre and then be able to control a user and if I could, I would then see if it allowed me to assign an available number that way but no dice.

So we will have to wait for either new roles to come out or for custom permissions to become available so we can create our own custom roles to fit.

 

You might want to also consider Azure AD PIM, so that someone is requesting a specific reason to elevate their rights and not just having elevated rights all of the time.

 

Thanks

 

Henry

 
 
 

 

View solution in original post