Assigning a Microsoft Teams Devices Administrator

Many organisations may want to outsource their Microsoft Teams Device Administrator role to a third-party. However, in the past, they would need to assign them full rights to their Teams Admin Center (TAC) as you can see below. This is obviously not ideal as someone who has a login could make unnecessary changes.

Assigning a Microsoft Teams Devices Administrator
Global Administrator in Teams Admin Center

Fast Forward to the new Teams Devices Role which needs to be setup in the Azure Active Directory portal. If I’m a standard user and try and login to the TAC, I see the error below.

Assigning a Microsoft Teams Devices Administrator
No Admin Rights

Firstly, I need to login to Azure Active Directory (AAD) via https://portal.azure.com and then go to AAD. From there I need to go to Roles and Administrators.

Assigning a Microsoft Teams Devices Administrator
Azure Portal

Now navigate to Roles and Administrators and search for Teams. You will now see the list of roles available for Teams. Next click on Teams Devices Administrator.

Assigning a Microsoft Teams Devices Administrator
Teams Devices Administrator Role

Now we can add someone to this role and I’m going to select Jake for this role as that is who tried to login earlier at the start of this post.

Assigning a user to a role

Once the role has been assigned, the user trying to login should log out, close their browser and log back in. The good news is that they should not see an error but instead see the just the Teams Devices as promsied.

Teams Devices Only Administrator

Now you can safely setup an account for someone to login and remotely manage and configure your Microsoft Teams Rooms. New features in the TAC include the ability to turn Guest Join Access for Zoom and Webex on and off.

Device Settings in Teams Admin Center

One thing to note here is that the Teams Devices Administration role does not allow access to call logs. This can be a good and bad thing. It means third-parties cannot see who has been calling who and what their display name etc is. However, it then prevents them from analysing why a call dropped for example. That would need to be done by someone who has the Teams Communications Administrator role.

Also this role will be available to setup in the Microsoft 365 portal too soon.

Any questions, let me know below.

For more news check out our resource centre

About the Author:

I have been in the IT & Telecoms industry for nearly 25 years, working with TDM & IPT telephony, unified communications, video conferencing/telepresence as well as the whole Microsoft suite of servers and applications. From engineering to technical support to IT management to pre-sales and then onto sales, I have vast experience of working with all types of customers, including SMB, multinational enterprises, and public sector. I now work at Crestron Electronics as the Enterprise UC Technical Director covering EMEA working with the Crestron Flex range of products for Microsoft Teams, Skype for Business and Zoom.  Making meetings simple.

Reference:

Walsh, G. (2020). Assigning a Microsoft Teams Devices Administrator. Available at: https://www.graham-walsh.com/assigning-a-microsoft-teams-devices-administrator/ [Accessed: 24th November 2020]

Check out more great Microsoft Teams Content here or join our mailing list to stay up to date.

Share this on...

Rate this Post:

Share: