Edit

Use Microsoft Teams administrator roles to manage Teams

  • Article
  • Applies to:
    Microsoft Teams

Using Azure Active Directory (Azure AD), you can designate administrators who need different levels of access for managing Microsoft Teams. Administrators can manage the entire Teams workload, or they can have delegated permissions for troubleshooting call quality problems or managing your organization's telephony needs.

Teams roles and capabilities

There are several Teams admin roles available: Teams administrator, Teams communications administrator, Teams communications support specialist, Teams communications support engineer, and Teams Device Administrator. Review the following table to understand what each role can do and which tools the admin can use in the Microsoft Teams admin center and PowerShell.

Note

Skype for Business Online Admins can manage both Teams and Skype for Business Online app policies through PowerShell.

To follow along, you must be an admin. The instructions for getting the permissions are in this article.

Role Can do these tasks Can access the following tools
Teams Administrator Manage the Teams service, and manage and create Microsoft 365 Groups. Everything in the Microsoft Teams admin center and associated PowerShell controls, including:
  • Manage meetings, including meeting policies, configurations, and conference bridges.1,2
  • Manage voice, including calling policies and phone number inventory and assignment.1,3
  • Manage messaging, including messaging policies.1,2
  • Manage all org-wide settings, including federation, teams upgrade, and teams client settings.1,2
  • Manage the teams in the organization and their associated settings, including membership (group management supported via PowerShell, team management in the Teams admin center).1,2
  • Manage Teams-certified devices and set up and assign configuration policies.1
  • View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset.2
  • Access all reports in the Microsoft Teams admin center
  • Access, monitor and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users impacted by poor call quality. Create new call quality reports, update and remove call quality reports as needed. Upload and update CQD building data.
  • Publish apps to the tenant app catalog in the Microsoft Teams admin center
Teams Communications Administrator Manage calling and meetings features within the Teams service. Manage meetings, including meeting policies, configurations, and conference bridges.1,2

Manage voice, including calling policies and phone number inventory and assignment.1,3

View user profile page and troubleshoot user call quality problems using the advanced troubleshooting toolset.2

Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality. Create new call quality reports, update and remove call quality reports as needed. Upload and update CQD building data.
Teams Communications Support Engineer Troubleshoot communications issues within Teams by using advanced tools. View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset.2

Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality.
Teams Communications Support Specialist Troubleshoot communications issues within Teams by using basic tools. Access user profile page for troubleshooting calls in Call Analytics. Can only view user information for the specific user being searched for.2

Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD).
Teams Device Administrator Manage devices configured for use with the Teams service. Manage device configuration and updates, review device health and status of connected peripherals, set up and apply configuration profiles, and restart devices.

The Teams Device Administrator role doesn't provide access to call quality data or call analytics. To view call quality data or call analytics, you need to be assigned the Teams Communications Administrator role.

1 PowerShell - Microsoft Teams module (The public release 1.1.6 or later is integrated with Skype for Business Online Connector.)
2 Microsoft Teams admin center 3 Teams administrator account must have a valid Teams license.

For more information about the admin tools available for managing Microsoft Teams, see Managing Microsoft Teams.

For more information about limits, specifications, and other requirements that apply to Teams, see Limits and specifications for Microsoft Teams.

Assign users to each role

You can assign users to these roles in Azure AD. To learn how to assign administrative roles to a user in Azure AD, see Assign a user to administrator roles in Azure Active Directory.

Cmdlets available for each role

Most of the PowerShell tools for these admin roles live in the Teams PowerShell module, and it's important to note that some of the cmdlets that these admin roles have access to control shared settings that are also used for Skype for Business Online.

To view the full list of cmdlets:

Get-Command -Module MicrosoftTeams