Use Microsoft Teams administrator roles to manage Teams
Using Azure Active Directory (Azure AD), you can designate administrators who need different levels of access for managing Microsoft Teams. Administrators can manage the entire Teams workload, or they can have delegated permissions for troubleshooting call quality problems or managing your organization's telephony needs.
Teams roles and capabilities
There are four Teams admin roles available: Teams service administrator, Teams communications administrator, Teams communications support specialist, and Teams communications support engineer. Review the following table to understand what each role can do and which tools the admin can use in the Microsoft Teams admin center and PowerShell.
To follow along, go to the admin center at https://admin.microsoft.com.
|Role||Can do these tasks||Can access the following tools|
|Teams Service Administrator||Manage the Teams service, and manage and create Microsoft 365 Groups||Everything in the Microsoft Teams admin center and associated PowerShell controls, including:
|Teams Communications Administrator||Manage calling and meetings features within the Teams service.||Manage meetings, including meeting policies, configurations, and conference bridges.1,3
Manage voice, including calling policies and phone number inventory and assignment.1
View user profile page and troubleshoot user call quality problems using the advanced troubleshooting toolset.3
Access the Teams PSTN blocked users report, PSTN minute pools report, and PSTN usage report in the Microsoft Teams admin center.
Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality. Create new call quality reports, update and remove call quality reports as needed. Upload and update CQD building data.
|Teams Communications Support Engineer||Troubleshoot communications issues within Teams by using advanced tools.||View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset.3
Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality.
|Teams Communications Support Specialist||Troubleshoot communications issues within Teams by using basic tools.||Access user profile page for troubleshooting calls in Call Analytics. Can only view user information for the specific user being searched for.3
Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD).
For more information about the admin tools available for managing Microsoft Teams, see Managing Microsoft Teams.
For more information about limits, specifications, and other requirements that apply to Teams, see Limits and specifications for Microsoft Teams.
Assign users to each role
You can assign users to these roles in Azure AD. To learn how to assign administrative roles to a user in Azure AD, see Assign a user to administrator roles in Azure Active Directory.
Cmdlets available for each role
Most of the PowerShell tools for these admin roles live in the Skype for Business PowerShell module, and it's important to note that some of the cmdlets that these admin roles have access to control shared settings that are also used for Skype for Business Online. The Skype for Business admin role also has access to all the cmdlets in the Skype for Business PowerShell module.
To view the full list of cmdlets currently available to a given role in the Skype for Business PowerShell module, follow these steps:
- Assign that role to a user (and make sure that the user has no other roles).
- Connect to the Skype for Business PowerShell module:
a. $session = new-csonlinesession
b. Import-pssession $session
c. Use Get-Module to identify the name of the imported session (it will be a randomly generated name).
- Use Get-Command -Module <name from above> to identify all available cmdlets