Something we relied on in Skype for Business Server was RBAC to give permissions for those who need them without giving “god mode” to everyone.
Fortunately, Microsoft Teams does have a number of RBAC roles. 4 new roles have just been enabled.
- Teams Service Administrator: The overall Teams workload admin, who can also manage and create O365 Groups. This role has access to all the controls available in the Microsoft Teams and Skype for Business admin center and their corresponding PowerShell equivalents. For example, this role can manage all meetings, voice, messaging, and org-wide settings.
- Teams Communication Administrator: This role can manage meetings and calling functionality in Microsoft Teams. For example. this includes changes to conference bridges and phone number assignments.
- Teams Communications Support Engineering: Users who are assigned this role have access to advanced call analytics tools. For example, they can view full call record information.
- Teams Communications Support Specialist: This role has access to basic call analytics tools. For example, the can view information for the specific users being searched for.
PowerShell cmdlets are available for each role. Most of these can be found in the Skype for Business PowerShell module and some of them control share settings that are also used by Skype for Business.
Documentation available here: https://docs.microsoft.com/en-us/microsoftteams/using-admin-roles
