Teams Admin Basics: governance

01

Who runs Teams: admin roles and least privilege

In simple words

In a school, the head teacher has every key, the caretaker has the boiler key, and the librarian has the library key. Giving everyone the head teacher's keys would be risky. Teams admin roles work the same way.

Before this course: Teams for Projects: planning and meeting practice (course 13.5.3). You can already run a project in Teams with Planner, agendas, polls, live notes, recaps and approvals. Now you move from using Teams well to deciding how a whole organization uses it.

Key facts

Teams admin roles are assigned in Microsoft Entra ID. Microsoft recommends the role with the fewest permissions, and says Global Administrator should be limited to emergencies.
The main Teams roles:

Role	What it is for
Teams Administrator	Manage the whole Teams service, and create and manage Microsoft 365 Groups
Teams Communications Administrator	Calling and meeting features, including meeting policies
Teams Communications Support Engineer	Troubleshoot call problems with advanced tools
Teams Communications Support Specialist	Troubleshoot call problems with basic tools
Teams Device Administrator	Manage Teams devices and their configuration
Teams Reader	Read everything in the Teams admin center, change nothing
Teams Telephony Administrator	Voice and telephony features, phone numbers

Microsoft's Teams governance planning guide groups the decisions into areas: creation, naming, classification and guest access; expiration, retention and archiving; membership management; and feature management with policies.
For each area Microsoft suggests the same three next steps: document your requirements, plan to implement them, and communicate the policies to users.

Step by step

List the admin tasks in your (real or made-up) organization: meeting settings, call quality, devices, reports, team clean-up.
Match each task to the smallest role in the table that can do it.
Give Teams Reader to anyone who only needs to look, for example an auditor or a trainee admin.
Keep Global Administrator for one or two emergency accounts only.
Start a governance plan document with the four areas as headings.
Check: nobody on your list has a bigger role than their tasks need.

LESSON 01Who runs Teams: admin roles and least privilege

LESSON 01 / ANIMATED LESSON / AI VOICE00:00 / 01:00

Voice

Read the video script

[Host] "Every admin role is a key. Hand out the smallest key that opens the right door."
[Text on screen: Teams Administrator · Communications · Device · Reader] "Teams has roles for the whole service, for meetings and calls, for devices, and a read-only role."
[Text on screen: Global Administrator = emergencies] "Microsoft says to keep Global Administrator for emergencies."
[Host] "Then write the plan: document, plan, communicate."

Try it now

Write a role map for a made-up organization of 200 people with five admin tasks. For each task, name the role and one reason it is the least privilege that works.

ClaudeStuck? Copy a ready-made prompt for Claude

Copy this, open Claude, paste it, and Claude will walk you through the lesson step by step.

For a grown-up: Claude is for adults (18+). Copy this, paste it into Claude, and use the answer to explain the lesson to your child.

I'm learning "Teams Admin Basics: governance" on The Future Market. Lesson 1: "Who runs Teams: admin roles and least privilege".

What the lesson teaches:
- Teams admin roles are assigned in Microsoft Entra ID. Microsoft recommends the role with the fewest permissions, and says Global Administrator should be limited to emergencies.
- The main Teams roles:
- Role - What it is for
- Teams Administrator - Manage the whole Teams service, and create and manage Microsoft 365 Groups
- Teams Communications Administrator - Calling and meeting features, including meeting policies
- Teams Communications Support Engineer - Troubleshoot call problems with advanced tools
- Teams Communications Support Specialist - Troubleshoot call problems with basic tools

The exercise I'm working on:
Write a role map for a made-up organization of 200 people with five admin tasks. For each task, name the role and one reason it is the least privilege that works.

I'm stuck. Please:
1. Explain the main idea in plain, simple words with one everyday example.
2. Walk me through the exercise one small step at a time. Ask me what I've done so far before giving the next step.
3. Don't just give me the final answer. Help me do it myself, and check my work when I share it.

I'm a parent helping my child (about 8 years old) with a lesson called "Who runs Teams: admin roles and least privilege" from the course "Teams Admin Basics: governance".

Here's what the lesson says:
In a school, the head teacher has every key, the caretaker has the boiler key, and the librarian has the library key. Giving everyone the head teacher's keys would be risky. Teams admin roles work the same way.

The activity:
Write a role map for a made-up organization of 200 people with five admin tasks. For each task, name the role and one reason it is the least privilege that works.

Please explain this so an 8-year-old understands: short sentences, a fun everyday example, and no hard words.
Then give me 3 simple questions I can ask my child to check they understood, and a way to do the activity together, one tiny step at a time.

Open Claude

Sources

Microsoft Learn, Use Microsoft Teams administrator roles to manage Teams: learn.microsoft.com/en-us/microsoftteams/using-admin-roles
Microsoft Learn, Plan for governance in Teams: learn.microsoft.com/en-us/microsoftteams/plan-teams-governance

My notes

I learned this

02