Microsoft is rolling out a brand new built-in RBAC role in the Teams admin center:
๐ ๐ป๐๐๐๐ ๐ฌ๐๐๐๐๐๐๐ ๐ช๐๐๐๐๐๐๐๐๐๐๐๐ ๐จ๐ ๐๐๐๐๐๐๐๐๐๐๐
This finally lets you manage external access (federation) without handing out full Teams admin permissions.
๐๐ก๐๐ญ ๐ญ๐ก๐ข๐ฌ ๐ง๐๐ฐ ๐ซ๐จ๐ฅ๐ ๐ฎ๐ง๐ฅ๐จ๐๐ค๐ฌ:
– Manage external access settings for federated domains
– Control which external domains are allowed or blocked
– Delegate this responsibility securely and cleanly
๐๐จ๐จ๐ ๐ญ๐จ ๐ค๐ง๐จ๐ฐ:
-> PowerShell-only (no Teams admin center UI access)
-> Canโt be scoped to Administrative Units (yet)
-> Assigned by Global Admins via Entra or M365 admin center
-> Rolling out worldwide: late Jan -> mid-Feb 2026
This is a huge win for least-privilege admin models.
No more โall or nothingโ when it comes to Teams federation.
Message ID: MC1215071