01 · Foundations

Roles that can change voice

Global Administrator is not a voice habit. The role you use decides what an audit can prove later.

Room HTMLAll downloads

Learn it in 5 minutes

Teams Administrator, Teams Telephony Administrator, and Teams Communications Administrator cover different slices of calling and meetings. Support Engineer and Support Specialist are troubleshooting roles, useful for Call Analytics, and the wrong tool for building a dial plan.

Use the smallest role that can do the change. Keep named accounts. Conditional Access belongs on those admin accounts. A sticky note that holds both the SBC password and a global admin password is the incident, not the recovery.

Use a named Teams or telephony admin. Keep Global Administrator off the daily voice work.

Room HTML

Visual

OPTIONS health12345678SIP OPTIONS
Repeated misses take a trunk out of service. The campus does not invent Microsoft's internal counter.
Privilege directionGlobal · Avoid dailyTeams admin · BroadTelephony · VoiceSupport · Read and troubleshoot
Narrower as you go right. Not a permission matrix export. Counts in this drawing are teaching order, not customers.

SVGPNGHTML

Worked example

I will use a telephony or Teams admin role, not a shared global admin.

  1. Need The change
  2. Role Smallest fit
  3. Account Named human
  4. Access Conditional Access

If it fails: Nobody can tell who changed the voice route because the account was shared.

Checklist HTML

Quiz

Which description of Homed online is accurate?

A colleague reports: The policy is assigned and the call never leaves the legacy system. Where do you start?

Which description of Islands mode is accurate?

Flashcards

Ecosystem

Glossary

  • Microsoft 365 tenant The boundary that holds Entra ID, licenses, Teams policies, and verified domains for one organization. Config: Confirm the tenant before you run Connect-MicrosoftTeams. Fault: Two engineers edit two tenants and each thinks the other broke the trunk.
  • Verified domain A domain added and proven in the tenant. Direct Routing SBC FQDNs must live on one of these domains. Config: Add the domain, including a sip subdomain, before you pair the gateway. Fault: Pairing fails because sbc.contoso.com was never verified.
  • onmicrosoft.com domain The default tenant domain. It is not a supported domain for a Direct Routing SBC FQDN. Config: Use a domain you verified, such as contoso.com. Fault: The gateway object is rejected or never becomes healthy.
  • Homed online Direct Routing users must be homed in Microsoft 365, not left on a Skype for Business on-premises registrar. Config: Check the user’s registrar before you assign a voice routing policy. Fault: The policy is assigned and the call never leaves the legacy system.

Sister technologies

Around the call: compliance recording, workforce management, emergency location, analytics, CRM screen pop, and an agent with a human escape. Each one has its own failure.

Config and troubleshooting

Nobody can tell who changed the voice route because the account was shared.

Cross-platform bridges

CUCM

Cisco CUBE is one of the SBC families named in this lab’s certification lesson. A certified release can be the Direct Routing SBC between Unified CM and Teams.

The tenant still needs a verified domain on the SBC FQDN, and the user still needs Teams Phone. The studio translator does not open a live AXL session. Confirm the current certified release before you build.

Webex

Teams Phone and Webex Calling are separate clouds. This lab does not describe a feature that registers a Webex Calling user into a Teams tenant.

A number move is usually a carrier port, a certified SBC, or a meetings interop product. Confirm before relying.

UCCE

Unified CCE stays the ACD until you migrate it. Microsoft’s contact-center articles name Connect, Extend, and Unify. They do not name a UCCE connector in the notes this lab cites.

Voice into Teams is still Direct Routing or Operator Connect. The routing script stays on the contact-center product you bought. Confirm the vendor’s current model. Source: https://learn.microsoft.com/en-us/microsoftteams/teams-contact-center.

Future hooks

Copilot Studio, Azure Communication Services, and Graph are later tracks in this lab. Treat any uncited limit as confirm before relying.

BridgesEcosystem

Sources and go deeper

Opened 2026-10. A row marked confirm did not open. Wikipedia is background. The Teams blog row is the community index.

  • Use Teams admin roles — Microsoft Learn — last checked 2026-10.
  • Security, Compliance, and Identity Fundamentals — Microsoft Learn — last checked 2026-10.
  • Microsoft 365 — Wikipedia — last checked 2026-10. Wikipedia fallback for background. Confirm the vendor page before you change a tenant
  • Microsoft Teams — Wikipedia — last checked 2026-10. Wikipedia fallback for background. Confirm the vendor page before you change a tenant
  • Microsoft Teams blog index — Community — last checked 2026-10. Community index for the Microsoft Teams blog. This is the index, not a claim that a post discusses this room

sources.json