Use Microsoft Teams administrator roles to manage Teams

Using Azure Active Directory (Azure AD), you can designate administrators who need different levels of access for managing Microsoft Teams. Administrators can manage the entire Teams workload, or they can have delegated permissions for troubleshooting call quality problems or managing your organization's telephony needs.

Teams roles and capabilities

There are four Teams admin roles available: Teams service administrator, Teams communications administrator, Teams communications support specialist, and Teams communications support engineer. Review the following table to understand what each role can do and which tools the admin can use in the Microsoft Teams admin center and PowerShell.

Role Can do these tasks Can access the following tools
Teams Service Administrator Manage the Teams service, and manage and create Office 365 Groups Everything in the Microsoft Teams admin center and associated PowerShell controls, including:
  • Manage meetings, including meeting policies, configurations, and conference bridges.1,3
  • Manage voice, including calling policies and phone number inventory and assignment.1
  • Manage messaging, including messaging policies.1,3
  • Manage all org-wide settings, including federation, teams upgrade, and teams client setting.s1,3
  • Manage the teams in the organization and their associated settings, including membership (group management supported via PowerShell, team management in the Teams admin center).23
  • View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset.3
  • Access, monitor and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users impacted by poor call quality. Create new reports, update and remove reports as needed. Upload and update CQD building data.
  • Publish apps to the Tenant App Catalog from the Teams client
Teams Communications Administrator Manage calling and meetings features within the Teams service. Manage meetings, including meeting policies, configurations, and conference bridges.1,3

Manage voice, including calling policies and phone number inventory and assignment.1

View user profile page and troubleshoot user call quality problems using the advanced troubleshooting toolset.3

Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality. Create new reports, update and remove reports as needed. Upload and update CQD building data.
Teams Communications Support Engineer Troubleshoot communications issues within Teams by using advanced tools. View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset.3

Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality.
Teams Communications Support Specialist Troubleshoot communications issues within Teams by using basic tools. Access user profile page for troubleshooting calls in Call Analytics. Can only view user information for the specific user being searched for.3

Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD).

1 PowerShell - Skype for Business module
2 PowerShell - Microsoft Teams module
3 Microsoft Teams admin center

For more information about the admin tools available for managing Microsoft Teams, see Managing Microsoft Teams.

For more information about limits, specifications, and other requirements that apply to Teams, see Limits and specifications for Microsoft Teams.

Assign users to each role

You can assign users to these roles in Azure AD. To learn how to assign administrative roles to a user in Azure AD, see Assign a user to administrator roles in Azure Active Directory.

Cmdlets available for each role

Most of the PowerShell tools for these admin roles live in the Skype for Business PowerShell module, and it's important to note that some of the cmdlets that these admin roles have access to control shared settings that are also used for Skype for Business Online. The Skype for Business admin role also has access to all the cmdlets in the Skype for Business PowerShell module.

To view the full list of cmdlets currently available to a given role in the Skype for Business PowerShell module, follow these steps:

  1. Assign that role to a user (and make sure that the user has no other roles).
  2. Connect to the Skype for Business PowerShell module:
    a. $session = new-csonlinesession
    b. Import-pssession $session
    c. Use Get-Module to identify the name of the imported session (it will be a randomly generated name).
  3. Use Get-Command -Module <name from above> to identify all available cmdlets