Microsoft Teams: Streamlined unified Role-Based Access Controls (RBAC) for Teams device management
Microsoft Teams is enhancing Role-Based Access Control (RBAC) in the Teams Rooms Pro management portal (PMP) to support additional Entra built-in roles. The rollout will occur in May 2025 and requires no admin action. The new roles include Global Administrator, Global Reader, Teams Administrator, and Teams Device Administrator. We are releasing Role-Based Access Control (RBAC) enhancements in the Teams Rooms Pro management portal (PMP). As part of our ongoing efforts to improve device management across portals, we will be extending PMP’s RBAC to support additional Entra built-in roles currently available in the Teams admin center (TAC). This transition aims to provide a seamless experience for admins managing Teams Rooms devices. This message is associated with Microsoft 365 Roadmap ID 485760. When this will happen: General Availability (Worldwide): We will begin rolling out early May 2025 and expect to complete by mid-May 2025. General Availability (GCC, GCCHigh): We will begin rolling out mid-May 2025 and expect to complete by late May 2025. How this will affect your organization: With these enhancements, PMP will now support these four Entra built-in roles: Global Administrator: Read and write access to everything in PMP. Note that the Global Administrator role will no longer be automatically assigned to the Teams Rooms Pro Manager role in PMP. Global Reader: Read-only access with some restrictions in the settings section, such as General, ServiceNow, Signals, and Plan Management. Teams Administrator: Read and write access in PMP, honoring Entra permissions. However, the write access to certain entities like mailbox settings may be restricted. Teams admins assigned to an Administrative Unit (AU) will need to be assigned to a PMP custom role to access PMP. Teams Device Administrator: Read and write access in PMP except for Roles and Partner Management functionalities. Similar to Teams Administrators, any Teams Device Administrator assigned to an AU will need to be assigned to a PMP custom role to access PMP. View image in new tab What you need to do to prepare: This rollout will happen automatically with no admin action required. Message ID: MC1056977
The post Microsoft Teams: Streamlined unified Role-Based Access Controls (RBAC) for Teams device management appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Microsoft Teams: Streamlined unified Role-Based Access Controls (RBAC) for Teams device management
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft Teams: Phishing detection for messaging
Microsoft Teams will introduce AI-powered, context-aware phishing detection starting November 2026, focusing on external first-contact chats a...
Intelligent Call Delegation in Teams
Intelligent Call Delegation in Teams uses AI to answer calls, gather context, and schedule follow-ups via Microsoft Bookings, helping users fo...
Copilot Code is rolling out in Frontier
Copilot Code, an AI-powered coding tool in Microsoft Copilot, is rolling out in the Frontier program starting late October 2026. It enables us...
Outlook: Copilot Prioritize feature will be retired
The Outlook Copilot Prioritize feature will be retired starting October 26, 2026, with removal completed by mid-November 2026 across all Outlo...
Microsoft Teams: Chat for organizers and presenters in structured meetings and webinars on Teams Rooms on Android
Teams Rooms on Android with Teams Rooms Pro license will gain access to a private presenter chat in green room-enabled meetings/events when jo...
Projects in Copilot
Projects in Copilot unify related chats, Cowork tasks, files, and context in one place, reducing repeated explanations. Available now in Cowor...
Microsoft 365 apps: Updated Brand Kit management experience
Microsoft 365 apps updated the Brand Kit management experience to simplify setup, streamline asset management, and improve workflows for Brand...
Microsoft Entra: Choose your own telephony provider for SMS and voice authentication
Starting October 30, 2026, Microsoft Entra ID allows organizations to choose a supported third-party telephony provider for SMS and voice auth...
New Outlook for Windows: All Accounts view brings email into a single inbox view
The new Outlook for Windows introduces an All Accounts view, a unified inbox showing emails from multiple accounts separately without merging....
Microsoft OneNote: CSV and TSV references in Copilot Notebooks
Microsoft OneNote now supports using CSV and TSV files as knowledge sources in Copilot Notebooks, enhancing content generation with structured...