Jul 23 2020 08:15 AM
Hi all
We have an outsourced service desk responsible for Joiners, Movers, Leavers. We need to allocate the minimum permissions possible to allocate a voice number (Direct Routing) to a user/remove a number from a leaver. MS tell us Global Admin! Anyone have an ideas please?
Thanks
Julien
Jul 23 2020 12:11 PM
Hi, a Teams Service Administrator should be sufficient for this. Take a look at https://docs.microsoft.com/en-us/microsoftteams/getting-phone-numbers-for-your-users#:~:text=Using%2...
Jul 23 2020 12:11 PM
Hi @JulienR1234 ,
Blimey, not Global Admin I am sure.
I would look to the Teams specific roles and at worst case it would be Teams Service Administrator and at best one of the communication ones.
Thanks
Henry
Jul 24 2020 01:03 AM
I know right, Global Admin. Guarantee though this is what support told us! Nearly fell off my chair.
Will give Teams Service Admin a try but even that might be too powerful for our needs but may just need to go with it. We really do only want to have them ability to manage the phone numbers, absolutely nothing else i.e. no dial plans and so on.
Jul 24 2020 01:49 AM
Hi @JulienR1234 ,
I will see what else I can think of.
Maybe something along the lines of a PowerApp calling the Graph, as maybe there are more specific permissions that can be set that way.
Will see what I can find.
Thanks
Henry
Jul 24 2020 02:50 AM
Solution
I tried to get clever and give user admin access and Teams communication specialist, in the hope that I could get into the Teams Admin Centre and then be able to control a user and if I could, I would then see if it allowed me to assign an available number that way but no dice.
So we will have to wait for either new roles to come out or for custom permissions to become available so we can create our own custom roles to fit.
You might want to also consider Azure AD PIM, so that someone is requesting a specific reason to elevate their rights and not just having elevated rights all of the time.
Thanks
Henry
Jul 24 2020 02:54 AM
@HenryPhillipsNimbitech Thanks Henry, appreciate you having done all that for us. Hopefully it's something MS look at, I'll look for and support (or log) a User Voice.
Jul 24 2020 02:56 AM
Yes please do as if they could just allow for user admin and still access to the Teams admin centre, you get the option to assign available numbers from there, without even tapping into the Voice list of menu options.
Report back with whichever User Voice you go for and I will give it a vote.
Thanks
Henry
Jul 24 2020 02:50 AM
Solution
I tried to get clever and give user admin access and Teams communication specialist, in the hope that I could get into the Teams Admin Centre and then be able to control a user and if I could, I would then see if it allowed me to assign an available number that way but no dice.
So we will have to wait for either new roles to come out or for custom permissions to become available so we can create our own custom roles to fit.
You might want to also consider Azure AD PIM, so that someone is requesting a specific reason to elevate their rights and not just having elevated rights all of the time.
Thanks
Henry