This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(144, 74%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EG0%3C/text%3E%3C/svg%3E)
Hello,
I'm trying to use the following module using an App registrations on Microsoft Entra. To do so I connect to the App Registration using a powershell script that connect to Microsoft Teams "Connect-MicrosoftTeams":
"Set-CsPhoneNumberAssignment -Identity $member.UserPrincipalName -EnterpriseVoiceEnabled $true"
When running this script I receive the following error : Microsoft.Teams.ConfigAPI.Cmdlets.internal\Set-CsPhoneNumberAssignment : Access Denied.
What additional permissions does my app need to use "Set-CsPhoneNumberAssignment" successfully?
My app currently has the following permissions: Microsoft Graph : "Group.ReadWrite.All" "TeamSettings.ReadWrite.All". I have tried other permissions, but with no luck.
Thank you!
An API that connects multiple Microsoft services, enabling data access and automation across platforms
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 38%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDL%3C/text%3E%3C/svg%3E)
Is there a way to grant permissions to the app - without relying on a teams or global admin executing the connect-microsoftteams?
I would like to empower the Operations team to manage aspects of Teams Voice (i.e. Set-CsPhoneNumberAssignment) without being Teams Admins.
I have been trying different Graph API permissions without success. I tried using some of the Teams admin roles and they either provide too many permissions or not enough. I need non-admin users to be able to set the TelephoneNumber attribute and set EnterpriseVoiceEnabled to $true if needed. I can't have them able to break Call Queues, Auto Attendants, and many other portions of Teams Voice.
Answer accepted by question author
Hi @Gus
In addition to the above permissions, you also need to ensure that the user logged into MicrosoftTeams has the teams administrator or global administrator role.
Hope this helps.
If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.
