Manage resource accounts in Microsoft Teams
A resource account is also known as a disabled user object in Azure AD, and can be used to represent resources in general. In Exchange it might be used to represent conference rooms, for example, and allow them to have a phone number. A resource account can be homed in Microsoft 365 or on premises using Skype for Business Server 2019.
In Microsoft Teams or Skype for Business Online, each Phone System call queue or auto attendant is required to have an associated resource account. Whether a resource account needs an assigned phone number will depend on the intended use of the associated call queue or auto attendant, as shown in the following diagram. You can also refer to the articles on call queues and auto attendants linked at the bottom of this article before assigning a phone number to a resource account.
This article applies to both Microsoft Teams and Skype for Business Online. For resource accounts homed on Skype for Business Server 2019, see Configure resource accounts.
If your organization is already using at least one Phone System license, to assign a phone number to a Phone System call queue or auto attendant the process is:
- Obtain a service number.
- Obtain a free Phone System - Virtual User license or a paid Phone System license to use with the resource account or a Phone System license.
- Create the resource account. An auto attendant or call queue is required to have an associated resource account.
- Assign the Phone System or a Phone System - Virtual user license to the resource account.
- Assign a service phone number to the resource account you just assigned licenses to.
- Create a Phone System call queue or auto attendant
- Link the resource account with a call queue or auto attendant.
If the auto attendant or call queue is nested under a top level auto attendant, the associated resource account only needs a phone number if you want multiple points of entry into the structure of auto attendants and call queues.
To redirect calls to people in your organization who are homed Online, they must have a Phone System license and be enabled for Enterprise Voice or have Office 365 Calling Plans. See Assign Microsoft Teams licenses. To enable them for Enterprise Voice, you can use Windows PowerShell. For example run:
Set-CsUser -identity "Amos Marble" -EnterpriseVoiceEnabled $true
In order to avoid problems with the resource account, follow these steps in this order.
If the Phone System call queue or auto attendant you're creating will be nested and won't need a phone number, the process is:
- Create the resource account
- Create a Phone System call queue or auto attendant
- Associate the resource account with a Phone System call queue or auto attendant
Create a resource account with a phone number
A top-level auto attendant or call queue will require a phone number be linked to its auto attendant. To create a resource account that uses a phone number, the process is:
Port or get a toll or toll-free service number. The number can't be assigned to any other voice services or resource accounts.
Before you assign a phone number to a resource account, you need to get or port your existing toll or toll-free service numbers. After you get the toll or toll-free service phone numbers, they show up in Microsoft Teams admin center > Voice > Phone numbers, and the Number type will be listed as Service - Toll-Free. To get your service numbers, see Getting service phone numbers or if you want to transfer an existing service number, see Transfer phone numbers to Office 365.
If you are assigning a phone number to a resource account you can now use the cost-free Phone System Virtual User license. This provides Phone System capabilities to phone numbers at the organizational level, and allows you to create auto attendant and call queue capabilities.
Obtain a Phone System Virtual User license or a regular Phone System license.
To get the Virtual User license, starting from the Microsoft 365 admin center, go to Billing > Purchase services > Add-on subscriptions and scroll to the end - you will see "Phone System - Virtual User" license. Select Buy now. There is a zero cost, but you still need to follow these steps to acquire the license.
Create a new resource account. See Create a resource account in Microsoft Teams admin center or Create a resource account in Powershell
Assign the service number to the resource account. See Assign/Unassign phone numbers and services.
Set up one of the following:
Link the resource account to the auto attendant or call queue. See Assign/Unassign phone numbers and services
Create a resource account without a phone number
A nested auto attendant or call queue will require a resource account, but in many cases the corresponding resource account will not need a phone number and the licensing required to support a phone number. Creating a resource account that does not need a phone number would require performing the following tasks in the following order:
- Create a new resource account. See Create a resource account in Microsoft Teams admin center or Create a resource account in Powershell
- Set up one of the following:
- Assign the resource account to the call queue or auto attendant. See Assign/Unassign phone numbers and services
Create a resource account in Microsoft Teams admin center
After you've bought a Phone System license, using Microsoft Teams admin center navigate to Org-wide settings > Resource accounts.
To create a new resource account click + New account. In the pop-up, fill out the display name and user name for the resource account (the domain name should populate automatically) then click Save.
Next, apply a license to the resource account in the O365 Admin center, as described in Assign licenses to users in Office 365 for business
Edit resource account name
You can edit the resource account display name using the Edit option. Click Save when you are done.
Assign/Unassign phone numbers and services
Once you've created the resource account and assigned the license, you can click on Assign/Unassign to assign a service number to the resource account, or assign the resource account to an auto attendant or call queue that already exists. Assigning a direct routing number can be done using Cmdlets only. If your call queue or auto attendant still needs to be created, you can link the resource account while you create it. Click Save when you are done.
To assign a direct routing or hybrid number to a resource account you will need to use PowerShell, see the following section.
If your resource account doesn't have a valid license, an internal check will cause a failure when you try to assign the phone number to the resource account. You won't be able to assign the number or associate the resource account with a call queue or auto attendant.
Change an existing resource account to use a Virtual User license
If you decide to switch the licenses on your existing resource account from a Phone system license to a Virtual User license, you'll need to acquire the free Virtual User license, then follow the linked steps in the Microsoft 365 Admin center to Move users to a different subscription.
Always remove a full Phone System License and assign the Virtual User license in the same license activity. If you remove the old license, save the account changes, add the new license, and then save the account settings again, the resource account may no longer function as expected. If this happens, we recommend you create a new resource account for the Virtual User license and remove the broken resource account.
Create a resource account in Powershell
Depending on whether your resource account is located online or on premises, you would need to connect to the appropriate Powershell prompt with Admin privileges.
The following Powershell cmdlet examples presume the resource account is homed online using New-CsOnlineApplicationInstance to create a resource account that is homed online.
For resource accounts homed on-premises in Skype For Business Server 2019 that can be used with Cloud Call Queues and Cloud Auto Attendants, see Configure Cloud Call Queues or Configure Cloud Auto Attendants. Hybrid implementations (numbers homed on Direct Routing) will use New-CsHybridApplicationEndpoint.
The application ID's that you need to use while creating the application instances are:
- Auto Attendant: ce933385-9390-45d1-9512-c8d228074e07
- Call Queue: 11cd3e2e-fccb-42ad-ad00-878b93575e07
If you want the call queue or auto attendant to be searchable by on-premise users, you should create your resource accounts on-premise, since online resource accounts are not synced down to Active Directory.
- To create a resource account online for use with an auto attendant, use the following command.
New-CsOnlineApplicationInstance -UserPrincipalName email@example.com -ApplicationId “ce933385-9390-45d1-9512-c8d228074e07” -DisplayName "Resource account 1"
You will not be able to use the resource account until you apply a license to it. For how to apply a license to an account in the O365 admin center, see Assign licenses to users in Office 365 for business as well as Assign Skype for Business licenses.
(Optional) Once the correct license is applied to the resource account you can set a phone number to the resource account as shown below. Not all resource accounts will require a phone number. If you did not apply a license to the resource account, the phone number assignment will fail.
Set-CsOnlineVoiceApplicationInstance -Identity firstname.lastname@example.org -TelephoneNumber +14255550100 Get-CsOnlineTelephoneNumber -TelephoneNumber +14255550100
See Set-CsOnlineVoiceApplicationInstance for more details on this command.
It's easiest to set the online phone number using the Microsoft Teams admin center, as described previously.
To assign a direct routing or hybrid number to a resource account, use the following cmdlet:
Set-CsOnlineApplicationInstance -Identity email@example.com -OnpremPhoneNumber +14250000000
Manage Resource account settings in Microsoft Teams admin center
To manage Resource account settings in Microsoft Teams admin center, navigate to Org-wide settings > Resource accounts, select the resource account you need to change settings for, and then click on the Edit button. in the Edit resource account screen, you will be able to change these settings:
- Display name for the account
- Call queue or auto attendant that uses the account
- Phone number assigned to the account
When finished, click on Save.
Delete a resource account
Make sure you dissociate the telephone number from the resource account before deleting it, to avoid getting your service number stuck in pending mode. You can do that using the following commandlet:
Set-csonlinevoiceapplicationinstance -identity <Resource Account oid> -TelephoneNumber $null
Once you do that, you can delete the resource account from the O365 admin portal, under Users tab.
In case you do not see the phone number assigned to the resource account on the Teams Admin Center and you are unable to assign the number from there, please check the following:
Get-MsolUser -UserPrincipalName "firstname.lastname@example.org"| fl objectID,department
If the department attribute displays Skype for Business Application Endpoint please run the cmdlet below :
Set-MsolUser -ObjectId -Department "Microsoft Communication Application Instance"
Refresh the Teams Admin center webpage after running the cmldet, and you should be able to assign the number correctly.
For implementations that are hybrid with Skype for Business Server:
For implementations in Teams or Skype for Business Online: