01 · Foundations
Licenses and policies attach to Entra objects. A queue that nobody can find in the directory cannot be licensed.
Humans, rooms, and resource accounts are Entra objects. Resource accounts are disabled for sign-in on purpose. They represent an auto attendant or a call queue. They are not a shared mailbox someone should open in Outlook as their daily driver.
Create the object, license it, then grant voice policy. Creating a resource account takes a Teams administrator role and the User Administrator role. Skipping the second role looks like a Teams bug and is an identity-permission miss.
Resource accounts are Entra objects that must not sign in. License them after you create them with both admin roles.
Resource accounts do not sign in. Humans and rooms do.
If it fails: An admin tries to sign in as the queue and treats the blocked login as an outage.
A colleague reports: Pairing fails because sbc.contoso.com was never verified. Where do you start?
Pairing fails because sbc.contoso.com was never verified. Add the domain, including a sip subdomain, before you pair the gateway. Source: https://learn.microsoft.com/en-us/microsoftteams/direct-routing-plan accessed 2026-10-14.
Which description of onmicrosoft.com domain is accurate?
The default tenant domain. It is not a supported domain for a Direct Routing SBC FQDN. People try it because it already resolves inside Microsoft 365. Source: https://learn.microsoft.com/en-us/microsoftteams/direct-routing-plan accessed 2026-10-14.
A colleague reports: The gateway object is rejected or never becomes healthy. Where do you start?
The gateway object is rejected or never becomes healthy. Use a domain you verified, such as contoso.com. Source: https://learn.microsoft.com/en-us/microsoftteams/direct-routing-plan accessed 2026-10-14.
Around the call: compliance recording, workforce management, emergency location, analytics, CRM screen pop, and an agent with a human escape. Each one has its own failure.
An admin tries to sign in as the queue and treats the blocked login as an outage.
Cisco CUBE is one of the SBC families named in this lab’s certification lesson. A certified release can be the Direct Routing SBC between Unified CM and Teams.
The tenant still needs a verified domain on the SBC FQDN, and the user still needs Teams Phone. The studio translator does not open a live AXL session. Confirm the current certified release before you build.
Teams Phone and Webex Calling are separate clouds. This lab does not describe a feature that registers a Webex Calling user into a Teams tenant.
A number move is usually a carrier port, a certified SBC, or a meetings interop product. Confirm before relying.
Unified CCE stays the ACD until you migrate it. Microsoft’s contact-center articles name Connect, Extend, and Unify. They do not name a UCCE connector in the notes this lab cites.
Voice into Teams is still Direct Routing or Operator Connect. The routing script stays on the contact-center product you bought. Confirm the vendor’s current model. Source: https://learn.microsoft.com/en-us/microsoftteams/teams-contact-center.
Copilot Studio, Azure Communication Services, and Graph are later tracks in this lab. Treat any uncited limit as confirm before relying.
Opened 2026-10. A row marked confirm did not open. Wikipedia is background. The Teams blog row is the community index.
