Teams Administrators can’t create Resource Accounts anymore?
Teams Administrators can’t create Resource Accounts anymore?
In the middle of April Microsoft pushed a message center notification stating that the following Teams administrator roles will no longer be able to create Teams Phone Resource Accounts:
- Teams Administrator
- Teams Communications Administrator
- Teams Telephony Administrator (this is a new role!)
Resource Accounts are required when creating Auto Attendants, Call Queues, and even used in the creation of Teams certified Contact Center applications.
For users that have these administrator roles assigned to them will also require one of the following
- Global Administrator
- User Administrator
That’ll probably throw a few admins into a frenzy, you don’t want to be giving that Global Administrator role out to anyone who asks for it! Both of these are considered privileged roles and admins should think carefully who has access to them. Microsoft recommend fewer than 10 people in your organisation should have privileged roles.
What are your options?⌗
Here are some options to help you overcome this change if it affects you.
- Grant either the Global or User Administrator role to your Teams admins alongside their Teams Administrator role.
- Before the change happens create a large group of “standby” Resource Accounts that can be used instead of creating at the time of AA/CQ creation
- Look into Privileged Access Management (PIM) options for assigning these roles to Teams admins
- Create a process for Teams admins to be able to request these Resource Accounts be created for them via a User or Global Administrator.
This change is due to start rolling out mid-July 2024 and expected to be completed by September 2024.
Are you just going to give your Teams admins access to the required roles, or have you come up with another solution? Comment below, I’d love to hear!