{"id":2741,"date":"2023-01-12T19:00:45","date_gmt":"2023-01-12T19:00:45","guid":{"rendered":"https:\/\/modern-workplace.uk\/?p=2741"},"modified":"2023-03-07T11:39:50","modified_gmt":"2023-03-07T11:39:50","slug":"teams-virtual-sbc-closing-azure-network-ports-warnings-for-azureloadbalancer-and-virtualnetwork-2-2-2-2-3-2-3-2-2-2-2-2-3-2-2-3-2-3-2-2-2-3-2","status":"publish","type":"post","link":"https:\/\/modern-workplace.uk\/?p=2741","title":{"rendered":"Global Reader Role: Limited Access to Microsoft Teams Admin Center"},"content":{"rendered":"\n<hr class=\"wp-block-separator has-css-opacity\"\/>\n\n\n\n<p>Really often, when you are trying to assess a customer&#8217;s Microsoft 365 tenant, a quick solution is to require the Global Reader role. The role is described here <a rel=\"noreferrer noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/microsoft-365\/admin\/add-users\/about-admin-roles?view=o365-worldwide\" data-type=\"URL\" data-id=\"https:\/\/learn.microsoft.com\/en-us\/microsoft-365\/admin\/add-users\/about-admin-roles?view=o365-worldwide\" target=\"_blank\">About admin roles in the Microsoft 365 admin center<\/a> and presents a relatively low risk because it has no capability to change any setting or parameter.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Global Reader<\/td><td>Assign the global reader role to users who need to view admin features and settings in admin centers that the global admin can view. The global reader admin can&#8217;t edit any settings.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>However, when you try to gather information from the Teams Admin Center (TAC) or from PowerShell, you will notice that some information are not available. Specifically:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">Manage teams<\/mark><\/strong> in the <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-purple-color\">Teams <\/mark><\/strong>menu is not available<\/li>\n\n\n\n<li>The whole <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-purple-color\">Teams devices<\/mark> <\/strong>menu is not available<\/li>\n\n\n\n<li>The whole <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-purple-color\">Teams apps<\/mark><\/strong> menu is not available<\/li>\n\n\n\n<li><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">Teams advisor <\/mark><\/strong>inside the <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-purple-color\">Planning <\/mark><\/strong>menu is not available<\/li>\n\n\n\n<li><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-amber-color\">Reporting Labels<\/mark><\/strong> in the <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-purple-color\">Analytics &amp; Reports<\/mark><\/strong> menu is not available<\/li>\n\n\n\n<li>The whole <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-purple-color\">Notifications &amp; alerts<\/mark><\/strong> menu is missing<\/li>\n<\/ul>\n\n\n\n<p>(The menu missing for the Global Reader are shown in the following images)<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full-Bar-1.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"230\" height=\"940\" src=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full-Bar-1.jpg\" alt=\"\" class=\"wp-image-2742\"\/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full-Bar-2.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"228\" height=\"347\" src=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full-Bar-2.jpg\" alt=\"\" class=\"wp-image-2743\" srcset=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full-Bar-2.jpg 228w, https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full-Bar-2-197x300.jpg 197w\" sizes=\"auto, (max-width: 228px) 100vw, 228px\" \/><\/a><\/figure>\n\n\n\n<p>The only solution available is to ask for the Teams Administrator role. <\/p>\n\n\n\n<p>All the other Teams administrative roles do not add the required menus \/ features.<\/p>\n\n\n\n<p>The situation is similar in PowerShell, with an additional issue: if the Global Reader has no Teams license, and you try to run a command like <em><strong>get-team<\/strong><\/em> you will have an error:<\/p>\n\n\n\n<p><em>ErrorMessage: Failed to get license information for the user. Ensure user has a valid Office365 license assigned to them.<\/em><\/p>\n\n\n\n<p>If you add a Teams license to the user you will have the following error:<\/p>\n\n\n\n<p><em>ErrorMessage: Failed to execute Skype backend request GetThreadRequest<\/em><\/p>\n\n\n\n<p>At the moment the number of administrative roles available in Teams is really limited. Also, there is no read-only role or read-only Administrator in Microsoft Teams<\/p>\n\n\n\n<p>In the next image you can see a full comparison of the Global Reader access to TAC, compared to a Teams Administrator<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full_Bars.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"248\" height=\"1024\" src=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full_Bars-248x1024.jpg\" alt=\"\" class=\"wp-image-2744\" srcset=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full_Bars-248x1024.jpg 248w, https:\/\/modern-workplace.uk\/wp-content\/uploads\/2023\/01\/Full_Bars-73x300.jpg 73w\" sizes=\"auto, (max-width: 248px) 100vw, 248px\" \/><\/a><\/figure>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Global Reader role in Microsoft 365 is often used to assess a customer&#8217;s tenant because it presents a low risk as it has no capability to change any setting or parameter. However, this role does not provide access to certain information in the Teams Admin Center (TAC) or in PowerShell, such as the ability to manage teams, access the Teams devices menu, the Teams apps menu, Teams advisor in the Planning menu, Reporting Labels in the Analytics &#038; Reports menu, and the Notifications &#038; alerts menu. To access this information, the Teams Administrator role is required. Additionally, in PowerShell, if the Global Reader does not have a Teams license, an error will occur when trying to run certain commands. The limited number of administrative roles available in Teams and the lack of a read-only role or read-only Administrator in Microsoft Teams is also noted.<\/p>\n","protected":false},"author":1,"featured_media":2746,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","twitterCardType":"","cardImageID":0,"cardImage":"","cardTitle":"","cardDesc":"","cardImageAlt":"","cardPlayer":"","cardPlayerWidth":0,"cardPlayerHeight":0,"cardPlayerStream":"","cardPlayerCodec":"","footnotes":""},"categories":[810,753,752,757],"tags":[762,759,751,77,755,83],"class_list":["post-2741","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-810","category-microsoft365","category-microsoft-teams","category-office-365","tag-microsoftteams","tag-microsoft-365","tag-microsoft-teams","tag-office-365","tag-teams","tag-voice"],"_links":{"self":[{"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/posts\/2741","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2741"}],"version-history":[{"count":3,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/posts\/2741\/revisions"}],"predecessor-version":[{"id":2749,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/posts\/2741\/revisions\/2749"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/media\/2746"}],"wp:attachment":[{"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2741"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2741"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2741"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}