Teams Custom RBAC Administrative Permissions

Question

I want to be able to assign certain different permissions to Teams Admin Centre to a set of Help Desk groups to manage channels and users, but I have other group where I only want to provide the ability to query Meeting logs and overall statistics. I would like to be clear that I do not want to assign any of the built-in roles available such as Teams Administrator. I want to be able to give them only what is required! Thanks all

Answer 1

Hi @Razzi29

Thank you for posting your question in the Microsoft Q&A forum.

Based on your description, it appears you're looking to assign very specific permissions to groups within the Microsoft Teams Admin Center, rather than utilizing the built-in Teams roles.

After testing, I believe you should use custom roles in Microsoft Entra ID

Step 1 You need to know exactly what actions each group should be allowed to perform (e.g., create channels, delete members, read meeting reports).  

Step 2 Create Custom Roles: 

• Go to entra.microsoft.com > Identity > Roles & admins > Roles.  
• Select + New custom role. 

• Set up name the role (e.g., "Teams Channel and User Manager," "Teams Meeting Report Viewer"). 
• Under the Permissions section, find and precisely select the permissions you identified in Step 1.  

Step 3 Once you've created the role, you'll assign it to your desired group. 

• After creating the role, select it.  
• Click on Add assignments.  
• Choose the group you want to assign that role to. 

After further review, I've found that the existing permissions may not fully align with your specific needs. Could you please take a look and confirm if there are any suitable permissions?   

Additionally, I've conducted further research and identified three built-in roles that closely match your requirements: Teams Communications Administrator, Teams Communications Support Engineer, and Teams Communications Support Specialist. You could find those roles in Eligible assignments section.

You can find detailed information about these roles, including their specific permissions, in the official Microsoft documentation here: Use Microsoft Teams administrator roles to manage Teams - Microsoft Teams | Microsoft Learn 

If any of these roles meet your requirements, you can proceed to assign them to your respective groups. 

  If you've tried both methods and still haven't found any permissions that fit your requirements, unfortunately, I won't be able to provide further assistance at this time. In this situation, I recommend you raise a support ticket through your admin center to get more in-depth help from the Microsoft support team. 

Hopefully, this helps clarify your situation. Please ask if you have any other questions. I'm always here and ready to help you with anything. 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have additional questions about this answer, feel free to click "Comment".    

Note: Please follow the steps in our documentation to enable email notifications if you want to receive updates for this thread.  

Answer 2

There is no method available to delegate access to just Meeting logs. Team's RBAC model does not allow you to create custom roles, best you can do is select one of the built-in ones and optionally, scope it to an Administrative unit (where applicable). You cannot create new roles or delegate granular permissions to specific functionalities/UI elements.

You might be able to address this need by creating a custom solution that fetches meeting logs and other required information and exposes it outside of the Teams admin center. Or look for third-party tools that do the same.