Ace Your MS-700 Microsoft 365 Certified: Teams Administrator Associate Exam

To ensure that all unused teams expire and are deleted automatically, you need to configure a Microsoft 365 group expiration policy. This policy applies to teams because they are backed by groups. Here are the steps to follow:

Sign in to the Microsoft 365 admin center with your admin credentials.

Go to Groups > Expiration.

Turn on the Enable expiration toggle.

In the Group lifetime box, enter 365 days or select it from the drop-down list. This means that the teams will expire 365 days from their creation date.

In the Select group types to apply the policy section, check the Teams box. You can also select other group types if you want.

In the Choose how to handle owners of groups without owners section, enter adminLOD-Se551723.onmicrosoft.com as the email address to receive notifications for the expiration of orphaned teams. You can also add more email addresses if you want.

Click Save to apply the policy.

That’s it. You have successfully configured a group expiration policy for teams. This policy will automatically delete the teams that are not renewed by their owners before the expiration date. You can also view and restore the deleted teams within 30 days from the Deleted groups page in the admin center.

To ensure that only users that are assigned the Global Administrator, User Administrator, or Guest Inviter roles can invite guest users to your company’s tenant, you need to configure the external collaboration settings in the Microsoft Entra admin center. Here are the steps to follow:

Sign in to the Microsoft Entra admin center with your admin credentials.

Expand External identities, and then select External collaboration settings.

Under Guest invite settings, choose Only users assigned to specific admin roles can invite guests.

Select Save to apply the settings.

To restrict external Teams communication for both calling and personal chat to only organizational users that use the microsoft.com domain, you need to use the Teams admin center to configure the external access settings. Here are the steps to follow:

Sign in to the Teams admin center with your Microsoft 365 username and password.

In the left navigation, go to Org-wide settings > External access.

Under External access, turn on the toggle for Users can communicate with other Skype for Business and Teams users.

Under Cross-tenant access settings, click Manage settings.

In the Cross-tenant access settings pane, under Calling and chat, select Allow specific domains and then enter microsoft.com in the box below. This will allow your users to communicate with Microsoft users via calling and chat.

Click Save.

Note: You also need to make sure that microsoft.com has configured their external access settings to allow communication with your domain. See Communicate with users from other organizations for more details.

To create a Microsoft 365 group named TeamsAdmin that can manage Teams Phone configurations without being able to manage teams and channels, you need to use PowerShell to create the group and assign the Teams Communications Administrator role to it. Here are the steps to follow:

Install the Azure Active Directory PowerShell for Graph module by running the following cmdlet:

Install-Module -Name AzureAD

Connect to Azure Active Directory by running the following cmdlet and entering your Microsoft 365 username and password:

Connect-AzureACreate a new Microsoft 365 group named TeamsAdmin by running the following cmdlet:

New-AzureADMSGroup -DisplayName "TeamsAdmin" -Description "Group for managing Teams Phone configurations" -MailEnabled $false -MailNickName "TeamsAdmin" -SecurityEnabled $true -GroupTypes "Unified"

Get the object ID of the new group by running the following cmdlet:

Get-AzureADMSGroup -Filter "DisplayName eq 'TeamsAdmin'"

Copy the object ID from the output and assign it to a variable, such as $groupID, by running the following cmdlet:

$groupID = "your-object-iInstall the Microsoft Teams PowerShell module by running the following cmdlet:

Install-Module -Name MicrosoftTeams

Connect to Microsoft Teams by running the following cmdlet and entering your Microsoft 365 username and password:

Connect-MicrosoftTeams

Get the role ID of the Teams Communications Administrator role by running the following cmdlet:

Get-CsOnlineRole -Identity "Teams Communications Administrator"

Copy the role ID from the output and assign it to a variable, such as $roleID, by running the following cmdlet:

$roleID = "your-role-id"

Assign the Teams Communications Administrator role to the TeamsAdmin group by running the following cmdlet:

New-CsOnlineRoleAssignment -SecurityGroupId $groupID -RoleDefinitionName $roleID

Now, you have created a Microsoft 365 group named TeamsAdmin that can manage Teams Phone configurations without being able to manage teams and channels. You can add members to this group by using the Azure Active Directory admin center or PowerShell.