MC711015Microsoft Teams: Global reader role for Teams devices in Teams admin center

Updated April 23, 2024: We have updated the rollout timeline below. Thank you for your patience.

Admins can now use the existing Global reader role for read-only access to the Teams devices section in the Teams admin center!

The Global reader role is a built-in role in Microsoft Entra ID that allows admins to view all administrative features and settings without the ability to edit or modify them. This role is useful for auditing, reporting, and troubleshooting purposes.

When will this happen:

General Availability (Worldwide, GCC): We will begin rolling out this improvement in mid-May 2024 (previously late March) and expect to complete it by late May 2024 (previously mid-April).

How this will affect your organization:

Admins with the Global reader role can access the Teams devices section with read-only permissions to view device information like device inventory, health, history, settings, and use capabilities like download logs, export, filter, etc. They won't be able to make edits or take remote actions on the devices, such as restart, update, assign configuration, and remote sign-in/sign-out.

This feature provides a consistent experience across the Teams admin center and enhances the control and security for admins who need to access device information, stay informed, and monitor their devices without the worry of unintended changes.

To learn more about roles and how to assign them: About admin roles in the Microsoft 365 admin center | Microsoft Learn

What you need to do to prepare:

No action is needed to prepare for this change. You may want to notify your users about this change and update any relevant documentation as appropriate.