แก้ไข

แชร์ผ่าน

Use Microsoft Teams administrator roles to manage Teams

  • บทความ
  • นำไปใช้กับ:
    Microsoft Teams

Using Microsoft Entra ID, you can designate administrators who need different levels of access for managing Microsoft Teams. Administrators can manage the entire Teams workload, or they can have delegated permissions for troubleshooting call quality problems or managing your organization's telephony needs.

Teams roles and capabilities

There are several Teams admin roles available: Teams Administrator, Teams Communications Administrator, Teams Communications Support Specialist, Teams Communications Support Engineer, Teams Communications Support Specialist, Teams Device Administrator, and Teams Telephony Administrator. Review the following table to understand what each role can do and which tools the admin can use in the Microsoft Teams admin center and PowerShell.

To follow along, you must be an admin. The instructions for getting the permissions are in this article.

Role Can do these tasks Can access the following tools
Teams Administrator Manage the Teams service, and manage and create Microsoft 365 Groups. Everything in the Microsoft Teams admin center and associated PowerShell controls, including:
  • Manage meetings, including meeting policies, configurations, and conference bridges.1,2
  • Manage voice, including calling policies, phone number inventory and assignment, and voice application policies.1,3
  • Create and manage resource accounts with both a Teams Administrator and User Administrator role assigned. For more information, see Assign permissions for managing a resource account.1,3
  • Manage messaging, including messaging policies.1,2
  • Manage all org-wide settings, including federation, teams upgrade, and teams client settings.1,2
  • Manage the teams in the organization and their associated settings, including membership (group management supported via PowerShell, team management in the Teams admin center).1,2
  • Manage Teams-certified devices and set up and assign configuration policies.1
  • View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset.2
  • Access all reports in the Microsoft Teams admin center
  • Access, monitor and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users impacted by poor call quality. Create new call quality reports, update and remove call quality reports as needed. Upload and update CQD building data.
  • Publish apps to the tenant app catalog in the Microsoft Teams admin center
Teams Communications Administrator Manage calling and meetings features within the Teams service. Manage meetings, including meeting policies, configurations, and conference bridges.1,2

Manage voice, including calling policies, phone number inventory and assignment, and resource account creation and management.1,3

Create and manage resource accounts with both a Teams Communications Administrator and User Administrator role assigned. For more information, see Assign permissions for managing a resource account.1,3

View user profile page and troubleshoot user call quality problems using the advanced troubleshooting toolset.2

Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality. Create new call quality reports, update and remove call quality reports as needed. Upload and update CQD building data.
Teams Communications Support Engineer Troubleshoot communications issues within Teams by using advanced tools. View user profile page and troubleshoot user call quality problems using advanced troubleshooting toolset.2

Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD) down to the users who are impacted by poor call quality.
Teams Communications Support Specialist Troubleshoot communications issues within Teams by using basic tools. Access user profile page for troubleshooting calls in Call Analytics. Can only view user information for the specific user being searched for.2

Access, monitor, and troubleshoot tenant's call quality and reliability using data exposed in Call Quality Dashboard (CQD).
Teams Device Administrator Manage devices configured for use with the Teams service. Manage device configuration and updates, review device health and status of connected peripherals, set up and apply configuration profiles, and restart devices.

The Teams Device Administrator role doesn't provide access to call quality data or call analytics. To view call quality data or call analytics, you need to be assigned the Teams Communications Administrator role.
Teams Telephony Administrator Manage Telephony features in Teams services Manage voice and telephony, including calling policies, phone number management and assignment, voice applications, and resource account creation and management.

Create and manage resource accounts with both a Teams Telephony Administrator and User Administrator role assigned. For more information, see Assign permissions for managing a resource account.1,3

Access to Public Switched Telephone Network (PSTN) usage reports from Teams admin center.

View user profile page.

Create and manage support tickets in Azure and the Microsoft 365 admin center.

1 PowerShell - Microsoft Teams module
2 Microsoft Teams admin center 3 Teams administrator account must have a valid Teams license.

For more information about the admin tools available for managing Microsoft Teams, see Managing Microsoft Teams.

For more information about limits, specifications, and other requirements that apply to Teams, see Limits and specifications for Microsoft Teams.

For information about Microsoft 365 admin center roles, such as Global Reader and Global Administrator, see About admin roles in the Microsoft 365 admin center. Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

Assign users to each role

You can assign users to these roles in Microsoft Entra ID. To learn how to assign administrative roles to a user in Microsoft Entra ID, see Assign user roles with Microsoft Entra ID.

Cmdlets available for each role

Most of the PowerShell tools for these admin roles live in the Teams PowerShell module.

To view the full list of cmdlets:

Get-Command -Module MicrosoftTeams