Microsoft 365 Certified: Teams Administrator Associate MS-700 Reddit Questions

To create a Microsoft 365 group named TeamsAdmin that can manage Teams Phone configurations without being able to manage teams and channels, you need to use PowerShell to create the group and assign the Teams Communications Administrator role to it. Here are the steps to follow:

• Install the Azure Active Directory PowerShell for Graph module by running the following cmdlet:

Install-Module -Name AzureAD

• Connect to Azure Active Directory by running the following cmdlet and entering your Microsoft 365 username and password:

Connect-AzureACreate a new Microsoft 365 group named TeamsAdmin by running the following cmdlet:

New-AzureADMSGroup -DisplayName "TeamsAdmin" -Description "Group for managing Teams Phone configurations" -MailEnabled $false -MailNickName "TeamsAdmin" -SecurityEnabled $true -GroupTypes "Unified"

• Get the object ID of the new group by running the following cmdlet:

Get-AzureADMSGroup -Filter "DisplayName eq 'TeamsAdmin'"

• Copy the object ID from the output and assign it to a variable, such as $groupID, by running the following cmdlet:

$groupID = "your-object-iInstall the Microsoft Teams PowerShell module by running the following cmdlet:

Install-Module -Name MicrosoftTeams

• Connect to Microsoft Teams by running the following cmdlet and entering your Microsoft 365 username and password:

Connect-MicrosoftTeams

• Get the role ID of the Teams Communications Administrator role by running the following cmdlet:

Get-CsOnlineRole -Identity "Teams Communications Administrator"

• Copy the role ID from the output and assign it to a variable, such as $roleID, by running the following cmdlet:

$roleID = "your-role-id"

• Assign the Teams Communications Administrator role to the TeamsAdmin group by running the following cmdlet:

New-CsOnlineRoleAssignment -SecurityGroupId $groupID -RoleDefinitionName $roleID

Now, you have created a Microsoft 365 group named TeamsAdmin that can manage Teams Phone configurations without being able to manage teams and channels. You can add members to this group by using the Azure Active Directory admin center or PowerShell.

To ensure that content on Microsoft SharePoint Online sites can be shared only with new and existing guest users, you need to limit the external sharing settings in the SharePoint admin center. Here are the steps to follow:

• Sign in to the SharePoint admin center with your admin credentials.
• Go to Policies > Sharing.
• Under External sharing, drag the SharePoint slider down to New and existing guests. (The OneDrive slider is dependent on SharePoint and will also be set to New and existing guests.)
• Under More external sharing settings, check the box Allow only users in specific security groups to share externally and select Manage security groups.
• Add the security groups that contain the users who are allowed to share content with guest users. You can also create a new security group if needed.
• Click Save to apply the settings.