Welcome to the Managing Microsoft Teams course! This course is designed for persons who are aspiring to the Microsoft 365 Teams Admin role. Microsoft Teams admins configure, deploy, and manage Office 365 workloads for Microsoft Teams that focus on efficient and effective collaboration and communication in an enterprise environment.
Students in this course are interested in Microsoft Teams or in passing the Microsoft Teams Administrator Associate certification exam.
Certification exam preparation
MS-700 includes three study areas, as shown in the table. The percentages indicate the relative weight of each area on the exam. The higher the percentage, the more questions you are likely to see in that area.
- Plan and Configure a Microsoft Teams Environment (45-50%)
- Manage Chat, Calling, and Meetings (30-35%)
- Manage Teams and App Policies (20-25%)
You can access the free on-demand training for MS-700 below:
This course assumes you have already acquired the following skills and experience:
- A proficient understanding of basic functional experience with Microsoft 365 services.
- A proficient understanding of general IT practices, including using PowerShell.
Module 1 Microsoft Teams in Microsoft 365
Overview of Microsoft Teams
The digital world is advancing at amazing speeds. To succeed, organizations must embrace a digital transformation: new ways of connecting people, data, and processes to create value. Microsoft Teams is the hub for teamwork in Microsoft 365 that brings people together in a shared workspace where they can chat, meet, collaborate on files, and automate workflows.
Microsoft Teams is also built on the security and compliance tools of Microsoft 365, which enables you to join modern collaboration and communication together with today’s complex legal and regulatory needs for businesses.
Microsoft Teams integration with Microsoft 365
Out of the box, Microsoft Teams brings together the most common tasks that employees need under a single roof, such as chats, meetings, calls, and the productivity suite of Microsoft 365. By combining these together into a sole product, employees can avoid having to constantly switch between various contexts. Instead, they can spend their time within a single team or channel that effortlessly brings together all the relevant information in-context.
There are multiple ways to leverage Microsoft 365 apps and services in Microsoft Teams. The most common scenario is to add a new tab to a team channel. Users can also add the content to a chat from Microsoft 365 services.
Microsoft Teams integration with Power Platform
Microsoft Teams is the hub for teamwork, the Microsoft Power Platform can augment this hub. Microsoft Teams groups all the information that users need for a particular context within various tabs in a channel. However, not all tasks can come fully formed out-of-the-box. There will always be business or operational processes that are unique to an organization that require tailored solutions. This is where the Power Platform can come in to fill those gaps.
Organizations can streamline business processes with Power Platform. With tools like Power Apps and Power Automate, organizations can build custom applications that can automate routine processes and supply a structure where there previously was none. And with Microsoft Teams, employees can use these custom apps all while taking advantage of the conversational nature of Microsoft Teams. Additionally, users can further develop custom solutions for their own use with pre-built templates, drag-and-drop simplicity, and quick deployment approaches.
Teams integration with Microsoft 365 Groups
Teams provides features to enhance the existing collaboration services and features of a Microsoft 365 Group with additional communication services, such as a persistent chat-based workspace (channels / chat) and voice (conferencing/PSTN calling). You can create a new team, which also creates a Microsoft 365 Group, or you can enable a Microsoft 365 Group with Microsoft Teams.
Teams adds several new features to a Microsoft 365 Group, including:
- Chat capabilities for 1:1 and 1:n instant messaging
- Standard channels for open communication and collaboration between all team members
- Private channels for secure communication and collaboration for a subgroup of team members
- A dedicated SharePoint document library for any standard and private channel
- Tab integration to a unified client experience
- Integration of apps, native, third-party and line of business apps into a unified client
- Activity feeds for easy
Microsoft Teams with SharePoint Online and OneDrive for Business
One of the core features of Microsoft Teams is the collaboration service it provides through SharePoint Online and OneDrive for Business. When a new team is created, a new SharePoint site is provisioned, including sub-sites for any public channel created in the team. If a team is added to an already existing Microsoft 365 Group (formerly Office 365 Group), the public channels are added in the existing Share-Point site. Files shared in a public channel are automatically added to the document library, and permissions and file security options set in SharePoint Online are automatically reflected within Teams.
Creating private channels differs from creating public channels, because private channels are not stored in a document library within the same site. Every private channel has its own site collection that’s separate from the parent team site. This ensure access to private channel files is restricted to only members of the private channel.
Microsoft Teams with Exchange
Another core service of Microsoft Teams is Exchange Online. When you create a team, a corresponding Microsoft 365 Group (formerly Office 365 Group) is automatically created behind the scenes, along with a mailbox for the Group in Exchange Online. This group mailbox provides messaging capabilities and a mail-based storage location for data processed and created in Teams. For each additional Microsoft 365 Group that is created and associated with a team, a corresponding group mailbox is automatically created in Exchange Online.
Exchange mailboxes are organized in highly available databases that are optimized to store communication and messaging data so that it’s secure and compliant to common business requirements. As a result, a team makes heavy use of its associated Exchange mailbox, even if regular messaging is one of the lesser used functions of users.
Overview of Microsoft telephony solutions
The telephony features of Microsoft Teams have been developed to achieve feature parity to Skype for Business Online. This first step in the feature development process was completed in August 2018. Since then, Microsoft Teams has been updated to provide a full-featured communication service for voice communication into and from the wired telephony network.
Overview of Teams Admin Roles
Microsoft 365 provides a variety of preconfigured administrative role groups so that selected users can receive elevated access to administrative tasks within the Office 365 services. The role groups are assigned through different portals, such as the Microsoft 365 Admin Center, the Security & Compliance Center, the Azure Portal, and PowerShell.
Several administrative roles have full access to all of the Teams’ service settings, such as the Global Administrator and the Teams admin. Other roles only provide access to certain parts of Microsoft Teams to perform recurring tasks, such as troubleshooting call quality problems and managing telephony settings.
The specialized Teams admin roles include:
- Teams admin
- Teams communication admin
- Teams communication support engineer
- Teams communication support specialist
Note: Even if Teams consists of different workloads from Office 365, the team-specific administrator roles do not grant permissions to other services, such as Exchange Online or SharePoint Online.
Overview of Azure Active Directory
Azure Active Directory (Azure AD) is the cloud-based identity and access management service for Office 365. As such, it’s a vital part of Microsoft Teams because Teams leverages identities stored in Azure AD for collaboration and communication. The license requirements for using Azure AD identities and for accessing Teams are included in a large number of different licensing bundles, such as Small Business Plans like Office 365 Business, Enterprise Plans like Office 365 Enterprise E1, Education Plans like Office 365 Education, and Developer Plans like Office 365 Developer.
In cloud deployments, a common challenge when building and deploying cloud applications is how to manage the credentials in your code for authenticating to cloud services while still keeping your credentials secured. Azure AD solves this problem with a feature called “managed identities,” which provides access to Azure and Office 365 resources for custom applications and services. The feature provides Azure services with an automatically managed identity in Azure AD. You can use this identity to authenticate to any service that supports Azure AD authentication, such as Exchange Online, SharePoint, OneDrive, and Microsoft Teams, without any credentials in your code.
Overview of Microsoft 365 Group
Microsoft 365 Groups (formerly Office 365 Groups) let you choose a set of people with which you wish to collaborate, and easily set up a collection of resources for those people to share. Manually assigning permissions to resources is a thing of the past because adding members to the Group automatically grants the needed permissions to all assets provided by the group. When creating a Microsoft 365 Group, you must decide if you want it to be a private group or a public
Security and compliance in Microsoft Teams
Microsoft 365 provides comprehensive Security & Compliance tools and services to help organizations comply with the multitude of legal and regulatory requirements they face across different industry sectors and countries. This topic gives you an overview of available Security & Compliance features for Microsoft Teams, and we will provide more details in later modules.
Overview of rollout path
When deploying Microsoft Teams, you should create a rollout path that describes the high-level steps required to deploy Teams as a collaboration and communication hub for your company. Rollout paths typically provide a macro view of the steps required for a deployment rather than a detailed, micro view of the deployment processes. So rather than providing a list of the detailed, technical steps that are needed, rollout paths provide a holistic view of the organizational steps required to complete the deployment.
Overview of adoption plan
As previously mentioned, user adoption is vital to the success of any Microsoft Teams deployment. Because Teams combines a wide range of different workloads, such as messaging, file, and voice communication, organizations may experience significant change to business processes to efficiently collaborate and communicate with Microsoft Teams. And as business processes change, end-users often find that their daily routines or processes change as well. It is this change that users must positively embrace to successfully implement Teams. Without buy-in from the end-users who implement Teams as their primary collaboration hub, a Teams deployment will fail, even if rolled out perfectly.
Overview of Teams licensing
Microsoft Teams is available in different license models, from a Teams (free) license, over the Teams Commercial Cloud Trial offer, up to subscriptions that include Teams and additional calling and voice Add-On licenses.
Planning for Teams governance
Microsoft Teams provides a rich set of tools to implement governance capabilities for organizations. When planning for governance, you should consider the following areas:
- Group and team creation, naming, classification, and guest access
- Group and team expiration, retention, and archiving
- Teams feature management
Overview of Teams management tools
Managing the various aspects of Microsoft Teams can be performed using a variety of tools. Basic tasks, such as creating and editing Teams settings, adding or removing members, and adding, removing and configuring apps can be performed by users through one of the Teams clients. Administrative tasks must be performed with administrative roles and through the Teams Admin Center, the Teams PowerShell module, or Microsoft Graph API.
Overview of Teams clients
Microsoft Teams has clients available for desktop (Windows, Mac, and Linux), web, and mobile (Android and iOS). It’s integrated with communications and meeting-room devices for a frictionless experience no matter which device users work from. All clients require an active internet connection and do not support an offline mode.
Module 2 Implement Microsoft Teams Governance, Security and Compliance
Governance and Lifecycle Management for Microsoft Teams
Planning and implementing governance and lifecycle management for Microsoft Teams is very important for consistent and well-organized communication and collaboration solution. Before deploying Microsoft Teams, you should consider things, such as who can create teams, what is the teams naming convention, whether to allow guest access, etc.
Teams is built on Microsoft 365 Groups (formerly Office 365 Groups), which includes a rich set of tools to implement governance capabilities that organizations require. In this lesson you will learn the features that you can use for Teams Governance, such as groups creation, classification, expiration policy, and naming policy. You will also learn how to leverage Teams usage reports to understand user adoption.
LAB: Create and Manage Microsoft 365 Group for Teams
Creating a new Microsoft 365 Group via other Office 365 applications – such as SharePoint, Planner or Stream – will create a Group with an Outlook communication modality that includes the ability to connect to Microsoft Teams.
Microsoft 365 Groups classification
When creating Microsoft 365 Groups, you might want to add information about the groups purpose. For example, you might want to inform users what type of documents are stored within the group. This type of group functionality is called group classification.
LAB: Configure Microsoft 365 Groups Expiration Policy
Typically people in organizations work on different projects and collaborate with different departments, it is common that users are added to many Microsoft 365 Groups (formerly Office 365 Groups). Sometimes, the projects are finished, but the Microsoft 365 Groups still exist. Regarding this, the administrators and users need a way to clean up the unused groups. The most optimal solution for this is to set an expiration policy, which helps to remove inactive groups from the system.
LAB: Configure Microsoft 365 Groups Naming Policy
Organizations can use a group naming policy to enforce a consistent naming strategy for groups created by users. A naming policy can help users identify the function of the group, membership, geographic region, or the person who created the group. The naming policy is applied to groups that are created across all Office 365 apps, such as Outlook, Teams, SharePoint, Planner, Yammer, and it applies for the group name and group alias, as well.
LAB: How to Access teams Reports?
There are various reports in the Microsoft Teams admin center. You can run different reports to get insights into how users in your organization are using Teams. For example, you can see how many users communicate through channel and chat messages and the kinds of devices they use to connect to Teams. Your organization can use the information from the reports to better understand usage patterns, help make business decisions, and inform training and communication efforts for successful user adoption.
Microsoft Teams Authentication
Microsoft 365 includes multiple technologies that provide security and user identity protection. There are multiple tools which are built-in to Microsoft 365 services so the administrators can choose how to
protect the identity of the users using the platforms and applications.
LAB: Configure Conditional Access and MFA for Teams
Conditional Access policies apply actions to users who sign-in to apps from their devices depending on multiple conditions. Conditions might include a user or group membership, IP location information,
device, application, real time risk detection or Microsoft Cloud App Security information. You can choose to have Microsoft Teams as a cloud application that will be manages with Conditional Access policies.
Overview of Teams admin roles
There are four Teams admin roles available:
- Teams Service Administrator
- Teams Communications Administrator
- Teams Communications Support Engineer
- Teams Communications Support Specialist
LAB: How to Assign Teams Admin Roles?
LAB: Implementing Threat Management for Teams
LAB: How to Access Security Reports For Teams?
The Microsoft 365 Security center provides reports that allow you to monitor potential security threats in your organization. Even though threat security reports may not be directly related to Microsoft Teams, they might alert you to suspicious activity that is threatening security of your organization.
Compliance for Microsoft Teams
This open collaboration approach adds additional challenges to protect the sensitive business data in files and to follow the various legal and regulatory requirements that force companies to retain data for certain lengths of time or to delete it after it is not required for any business use. Microsoft 365 addresses these challenges with sensitivity and retention labels, and a unified labeling strategy that combines these independent features to a unified solution.
LAB: Create Sensitivity Labels for MS Teams
Sensitivity labels can help the users to classify documents and protect the sensitive content in the files. The sensitivity labels enable data classification across the company and enforce protection based on that classification, which helps users take the right actions on the right content and prevent the unwanted leaking of information outside the organization.
LAB: Creating DLP Policies for Teams
Many organizations today are concerned with protection of sensitive information and being compliant with their internal business standards and industry regulations. When we mention sensitive data, we mean the information which can include financial data or personally identifiable information such as credit card numbers, social security numbers, or health records. With Data Loss Prevention policies, organizations can identify, monitor, and automatically protect sensitive information across their Office 365 environment.
LAB: Creating eDiscovery cases for Teams
Organizations have many reasons to respond to legal cases involving certain executives or other employees in their organization. This might involve quickly finding and retaining for further investigation specific information in email, documents, instant messaging conversations, and other content locations used by people in their day-to-day work tasks. With eDiscovery, organizations can better understand Microsoft 365 data and reduce eDiscovery costs.
LAB: Creating Supervision Policy for Teams
For many compliance requirements youmay need to take samples from user communications, to see, if they comply with all policies and regulations. Because eDiscovery is an inadequate tool for taking random samples, you can use supervision policies to analyze only a certain amount of data from supervised users and groups. You can define policies that capture internal and external email, Microsoft Teams, or 3rd-party communications.Reviewers can then examine the messages to make sure that they are compliant with your organization’s message standards and resolve them with a classification type.
Use scoped directory search for Teams
With Microsoft Teams scoped directory search, the administrator can create virtual boundaries that control how users communicate with each other within the organization. Microsoft Teams provides custom views of the directory to the company users (Information Barrier policies support these custom views). Once the policies have been enabled, the results returned by searches for other users (example: to initiate a chat or to add members to a team) will be scoped according to the configured policies. Users will not be able to search or discover teams when scoped search is in effect. Note that in case of Exchange hybrid environments, this feature will only work with Exchange Online mailboxes (not with on-premises mailboxes).
LAB: Managing GDPR Requests for MS Teams
Office 365 administrative tools have implemented features which can assist in searching and finding, as well as acting on personal data in order to respond to Data Subject Requests (DSR) (this includes how to find, access, and act on personal data that is stored in Microsoft’s cloud).
Information Barrier Policy for Teams
Information barrier policies are created when an administrator wants to restrict the communication between certain individuals or groups. For example, an R&D department is working on a highly confidential project which are not allowed to share with people outside the department. The administrator needs to prevent or isolate people in R&D department from communicating with anyone outside of that group.
Security and compliance alerts for Teams
Alert policies help administrators identify events in their tenants that could indicate a security breach, an abuse of administrative privileges or other activities that require monitoring. Alert policies send email notifications and track recognized events on an alert dashboard in the Security & Compliance Center, to keep track of events in a tenant.
Module 3 Prepare the environment for a Microsoft Teams deployment
Teams Upgrade Paths and Upgrade Modes
It is recommended the transition from Skype for Business to Teams be performed in stages. You can review the upgrade framework from Microsoft. It’s important to understand how the two applications coexist, when and how they interoperate, and how to manage users’ migration all the way to their eventual upgrade from Skype for Business to Teams. You will need to analyze your existing environment and deployed functionalities, understand your business requirements, and evaluate compatibility of all existing solutions and devices for moving to Teams.
Manage meeting migration
The Meeting Migration Service (MMS) provides updates for existing meetings, when:
- When a user is migrated from on-premises to the cloud (SfB Online or to TeamsOnly)
- When an admin makes a change to the user’s audio-conferencing settings
- When an online user is upgraded to Teams only
- When you use PowerShell to trigger MMS
LAB: How to Configure Coexistence for MS Teams?
When planning your transition from Skype for Business to Teams, you will need to choose appropriate upgrade path and coexistence modes for a smooth transition to Microsoft Teams in your organization. You can choose the same coexistence mode for all users and upgrade to Microsoft Teams all at once, or you may do the migration batch by batch, configuring different coexistence modes for different groups of users.
Overview of Teams networking requirements
Prior the deployment of Microsoft Teams in a productive environment, you need to evaluate if the existing network meets the networking requirements of Microsoft Teams. Make sure that you have the required bandwidth, access to all required IP addresses, the correct ports opened, and that you’re meeting the performance requirements for real-time media.
Deploy and Manage Microsoft Teams endpoints
Microsoft Teams is an application which offers the users to stay connected no matter which type of device or operating system they work. Users can work with Teams on desktop clients available in Windows and Mac, as well as web clients and mobile clients in Android and iOS. There are also lot of different Teams devices, such as conference phones, headsets, speakerphones, cameras and conference rooms.
Manage device settings and firmware
Administrators can manage Teams devices in their organization from the Microsoft Teams admin center. For example, administrators can view and manage the device inventory for their organization and perform tasks such as update, restart, and monitor diagnostics for devices. Admins can also create and assign configuration profiles to a device or groups of devices.
LAB: Configuration Policy for Teams
To manage settings and features for Teams devices in your organization, you can use configuration profiles. As an administrator, you can create or upload configuration profiles to include settings and features which you would like to enable or disable and then assign a profile to a device or groups of
Microsoft Teams Rooms
Microsoft Teams Rooms provides a complete meeting experience that brings HD video, audio, and content sharing to meetings of all sizes, from small huddle areas to large conference rooms.
Module 4 Deploy and manage teams
LAB: How to Create and Manage Teams?
By default, all users can create teams using the Teams client and invite members unless you restrict the creation of teams to Global Administrators or Teams Service Administrators. Administrators can also create teams in the Teams admin center or PowerShell.
LAB: Managing Membership in Teams
Within Microsoft Teams there are two user roles: owner and member. By default, a user who creates a new team is granted the owner status and owners can promote other members to become additional owners. Independently from a user’s role, owners and members can both have moderator capabilities for a channel (if moderation has been set up). If a team is created from an existing Microsoft 365 Group, permissions are inherited.
LAB: Managing Access for External Users in Teams
Microsoft Teams allows collaboration beyond the borders of your own organization and tenant. You can also chat, call and share content with external users and allow your users to invite guests of their choice to Teams they own.
There are two ways to collaborate and communicate with people outside of your organization when using Teams. You can add them as guest users in your tenant, or you can enable external access.
Module 5 Manage collaboration in Microsoft Teams
LAB: How to Manage Messaging Policies in Teams?
Messaging policies are used to control chat and channel messaging features for users. They can provide and deny messaging actions for users, such as the possibility to delete sent messages, access to Memes, Stickers Giphy, or the ability of users to remove other users from a group chat.
LAB: How to Manage Channels Policies in Teams?
Teams policies control how users can interact with teams and channels. This includes the availability of features for teams; for example, whether private teams are discovered in the search results, and whether users can create private teams. If users are not assigned a custom policy, the default global policy controls the available features. A user can only be assigned to one team policy at a time.
LAB: How to Manage Microsoft Teams Settings?
Managing Teams settings includes several options to control basic features of Microsoft Teams, including notifications and feeds, email integration, cloud storage options, and devices. These settings are organizational-wide settings and apply to all users and teams in an organization.
LAB: Managing Private Channel Policies in Teams
One way to restrict the creation of private channels is to let an administrator create a Team policy that restricts private channel creation. But team owners can also restrict the private channel creation on a per team level basis themselves. This can be handy when team owners want to retain full control of their team activity, which includes restricting members from creating private channels, which team owners in turn cannot control.
LAB: How to Manage Email Integration in Teams?
When integrating Microsoft Teams into existing messaging workflows to provide information through email to team members, it is possible to retrieve email addresses for any individual channel within a team. Messages sent to these email addresses are then posted as conversation messages to the conversations of the channel, and other members can download the original message or add comments to the message’s content.
LAB: How to Manage Files Sharing in Teams?
Sharing files is a basic operation in Office 365 and Microsoft Teams when collaborating with internal and external participants. The different operations in Teams result in different file handling operations to provide file access to one or many chat participants or all members of a single channel, including external guest users.
LAB: How to Manage Channel Moderation in Teams?
Channel moderation is managed in one of the Teams clients by team owners.
LAB: How to Manage Teams Apps Settings?
Teams apps let you do more in Teams. Think about the tools, files, and dashboards your org already uses. Many of them can be added right into Teams. Teams apps provide out-of-the-box tools that enable your organization to maximize its Teams experience in the context of a channel in a team, a group chat, or an individual user alone (personal).
Module 6 Manage communication in Microsoft Teams
Meetings and Conferencing in MS Teams
Once you have set up teams, channels, and applications within Microsoft Teams, the next step you can take is to add and customize the meetings settings and policies for audio conferencing, video, and
LAB: Configuring Conference Bridges in Teams
Conferencing bridges allow users to dial into meetings through their phones. When configuring Audio
Conferencing in your Office 365 environment, you will receive phone numbers for your users from what is called an audio-conferencing bridge (a conferencing bridge can contain one or more phone numbers). These phone numbers are used when the users dial in to a meeting (the phone number to be included in every Microsoft Teams meeting invite).
LAB: How to Manage Meeting Policies in Teams?
Overview of live events in Microsoft Teams
Microsoft Teams offers users chat-based collaboration, calling, meetings, and live events. A live event is created for one-to-many communications where the host of the event leads the interactions and audience participation is primarily geared to viewing the content shared by host. The attendees can watch the live or recorded event in Yammer, Teams, and/or Stream, and they can also interact with the presenters using moderated Q & A or a Yammer conversation. For live events, Microsoft Teams provides an option that enables users to expand their meeting audience by broadcasting video and meeting content online to large audiences of up to 10,000 attendees.
LAB: How to Manage Live Events Settings in Teams?
Settings for the Live events that are held within your company can be configured in the Microsoft Teams admin center. The administrator can set up a support URL and configure a third-party video distribution provider (note that these settings are going to be applied to all live events which are going to be created in your organization).
Manage phone numbers
Microsoft Teams includes cloud voice capabilities that are delivered from Office 365 and provide Private Branch Exchange (PBX) functionality and options for connecting to the Public Switched Telephone Network (PSTN). Microsoft’s technology that enables call control and PBX capabilities is titled Phone System.
Manage Phone System for Microsoft Teams
Phone System in Microsoft Teams allows users to place and receive calls, transfer calls, and mute or unmute calls. Calling in Teams supports basic Phone System features, such as call answering and initiating (by name and number) with integrated dial pad, call holding and retrieving, call forwarding and simultaneous ringing, call history, voicemail, and emergency calling. Users can also use a different range of devices to establish calls, including mobile devices, headset connected to a computer, and an IP phone.
Microsoft Teams add-on licensing
Add-on licenses for voice capabilities and phone system features provide additional Teams features to users with an active subscription plan. For example, if a user is licensed with Microsoft 365 E3 and wants to use calling features for voice communication from his Teams client into PSTN, you can purchase a phone system add-on license and a calling plan license to provide usage rights for the phone systems of Office 365 (phone system add-on) and credits to perform phone calls (calling plan add-on). Microsoft Teams add-on licensing is designed to provide maximum flexibility for organizations when licensing users with already assigned subscription plans for voice communication features.
Troubleshot audio, video, and client issues
It is essential that Teams administrators know how to troubleshoot the Microsoft Teams client because the Teams client, the network, and any number of configuration issues in Microsoft Teams admin center can disrupt your users from effectively sending and receiving calls and participating in Teams meetings. Just imagine your Teams meetings are not available during an important board meeting where remote users are required to participate. The ability to investigate these issues and find the proper solution is a key task for Teams administrators. On the other hand, understanding the issues and preventing them from happening in the first place is also necessary to being successful in your Teams administrator role.
I wish you all the very best for your exam and continued career success! 👍
You can subscribe to the A Guide To Cloud YouTube channel below: