Use Microsoft Teams admin roles to manage Teams

Using Azure Active Directory (Azure AD), you can designate administrators who need different levels of access for managing Microsoft Teams. Administrators can manage the entire Teams workload, or they can have delegated permissions for troubleshooting call quality problems or managing your organization's telephony needs.

Teams roles and capabilities

There are four Teams admin roles available: Teams service administrator, Teams communications administrator, Teams communications support specialist, and Teams communications support engineer. Review the following table to understand what each role can do and which tools the admin can use in the Teams and Skype for Business Admin Center and PowerShell.

Role Can do these tasks Can access the following tools
Teams Service Administrator Manage the Microsoft Teams service, and manage and create Office 365 Groups Everything in the Microsoft Teams & Skype for Business Admin Center and associated PowerShell controls, including:

Manage meetings, including meeting policies, configurations, and conference bridges1,3

Manage voice, including calling policies and phone number inventory and assignment1

Manage messaging, including messaging policies1,3

Manage all org-wide settings, including federation, teams upgrade, and teams client settings1,3

Manage the teams in the organization and their associated settings, including membership (group management supported via PowerShell, team management in the admin portal rolling out) 23

View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset3
Teams Communications Administrator Manage calling and meetings features within the Microsoft Teams service Manage meetings, including meeting policies, configurations, and conference bridges1,3

Manage voice, including calling policies and phone number inventory and assignment1

View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset1,3
Teams Communications Support Engineer Troubleshoot communications issues within Teams by using advanced tools. Access to user profile page for troubleshooting calls in Call Analytics. Can view full call record information.3
Teams Communications Support Specialist Troubleshoot communications issues within Teams by using basic tools. Access to user profile page for troubleshooting calls in Call Analytics. Can only view user information for the specific user being searched for.3

1 PowerShell - Skype for Business module
2 PowerShell - Microsoft Teams module
3 Microsoft Teams and Skype for Business Admin Center

For more information about the admin tools available for managing Microsoft Teams, see Managing Microsoft Teams.

Assign users to each role

You can assign users to these roles in Azure Active Directory. To learn how to assign administrative roles to a user in Azure Active Directory, see Assign a user to administrator roles in Azure Active Directory.

Cmdlets available for each role

Most of the PowerShell tools for these admin roles live in the Skype for Business PowerShell module, and it's important to note that some of the cmdlets that these admin roles have access to control shared settings that are also leveraged for Skype for Business Online. To view the full list of cmdlets currently available to a given role in the Skype for Business PowerShell module, follow these steps:

  1. Assign that role to a user (and make sure that the user has no other roles).
  2. Connect to the Skype for Business PowerShell module:
    a. $session = new-csonlinesession
    b. Import-pssession $session
    c. Use Get-Module to identify the name of the imported session (it will be a randomly generated name).
  3. Use Get-Command -Module <name from above> to identify all available cmdlets