This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi,
i wrote a handy PowerShell that would allow my not so PowerShell experienced colleague to easily manage the phone numbers of our "Teams Voice" Users. As i am looking for "least privilege" i want to give him.
I thought "Teams Communication Admin" would be the role that should fit to this role.
But if he executes the script - he gets an error.
I can execute it without problems (same machine/same settings).
But i am a "global admin" - so no permission issues here.
I could not find a doc about it - so maybe you can help me out here.
I will share the script in the gallery (or how it is named now - as soon as i am sure it will work)
Could you share with us the error message of Teams communication administrator?
It recommends you try to use Set-CsOnlineVoiceUser command to set the PSTN specific parameters, such as telephone numbers and emergency response locations. I tested this command with Teams communication administrator and it works well.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
I will try to replace the command with the other one and get back as soon as possible.
@StephanG ,
How is going now?
Please feel free to drop us any note.
Have a good day!
I try to replace the command
Set-CsUser -Identity $Mail -EnterpriseVoiceEnabled $true -HostedVoiceMail $true -OnPremLineURI "tel:$phonenumber"
But as i look into the help for the new command - i only have the phone number
Am i right that i need:
Set-CsOnlineVoiceUser
Set-CsOnlineVoicemailUserSettings then?
And the Enterprise Voice enabled is set to "true" as soon as i assign a phone number?
I do some more researches and find that user must be the Global Administrator role and be able to run remote PowerShell to enable Phone System and voicemail. So, if you want to enable Phone System voice services for user in script, it must be Global Administrator. The following is the quote of official document:
For more details, please refer to this document.
So it would be an option to enable enterprise voice and voicemail for every user as a scheduled script?
Having a global admin on line to "assign phone numbers" does not seem right :)
I really get far. With the Teams Communication Admin i can
Grant-CsOnlineVoiceRoutingPolicies
Set-CsOnlineVoicemailUserSettings -Identity $Mail -VoicemailEnabled $true
But when i try to
Set-CsOnlineVoiceUser -Identity $Mail -TelephoneNumber $phonenumber
I get the error: "This user is not licensed for PSTN Calling. To assign a telephone number to a user, the user must first be licensed for PSTN Calling."
User has the "Phone System" license for 2 years so it cannot be a "24h cloud thing".
These are the informations of my test user
RunspaceId : x
Name : Test, Rainer
Id : x
TenantId : x
Number :
LicenseState : Licensed
Location :
PSTNConnectivity : OnPremises
UsageLocation : DE
EnterpriseVoiceEnabled : False
I think the problem is that i cannot set EnterpriseVoiceEnabled to true.
I can do that with set-csuser but only with more rights. Or is there something that also can flip that to true?
@StephanG ,
According to the error message -- "This user is not licensed for PSTN Calling. To assign a telephone number to a user, the user must first be licensed for PSTN Calling.", it seems that you should assign calling plan license to this user.
Yes :) That i know
But the user has a M365 E5 license like all the other users i provisioned with set-csuser (and they work) - so i think the problem must be with the "enterpricevoice enabled" instead of the license.
@StephanG ,
Your thought makes sense.
So, the main trouble is the permissions.
Do you know if it harms anything if i have a script that changes the "enterprisevoice to enabled" for all users from this branch - even if they do not have a phone number?
I could schedule it with a CBA script that does it every night. (I already have some of those ;) )
@StephanG ,
From my experience, it should have no impact.
For security purpose, you could test this with some users first.
@StephanG ,
How is going now?
If you have any update on this thread, please feel free to drop us any notes.
Have a nice day!
Well - i think i made a mistake :) - as i said - i added "phone system" license to the users.
But it seems that this command "Set-CsOnlineVoiceUser" is only for the "calling plans" and not "cloud sbc"
So it does not matter if they have enterprisevoice enabled.
Then it seems to stay a "global admin" task - until the setting arrives at the front end.
@StephanG ,
You are right. The root cause is still Global admin roles.
Last question. Is there something like gallery technet where "normal users" can publish their script.
Or do i need a own Github space?
@StephanG ,
Yes, you should have a Github space. The following is the statement of official document for reference:
