Microsoft Team Access Management

Hi All,

What are the best practices to manage Microsoft Team access including users and the channel/teams they are part of, their respective accesses on those channels.

Hey Mahesh,

There are two ways to manage teams access based on what I have implemented:

Scenario 1: AD group bridging to Teams and its relevant groups and channels. Which basically syncs the user base to the relevant accesses within the application during leaver user will be stripped off all the AD groups and Set-Mailbox -Identity jsmith -HiddenFromAddressListsEnabled $true via After-Modify Rule.

Scenario 2: Azure API invocation via After Rule on AD.

Thanks,
Aman

Scenario 3 - Use the Entra ID connector

There might be an issue with this if you are a hybrid on-prem/entra environment and use “birthright” roles that assign teams, as it will try and create a user in entra and likely fail. However, once the next aggregation occurs, it should provision the access correctly.

Hi @mcheek,

Thanks for the input.

Does Entra ID connector helps to manage Team Channels as well?

Yes, see the documentation

Thanks Mark for the inputs. This is what I was looking for.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.