Wednesday, May 25, 2022

Teams Real Simple with Pictures: The Microsoft 365 Admin App is here. In Teams.

This blog is part of a series on Teams. For more articles, take a look through the site and check back often

Written: 23/01/2022 | Updated: N/A

In a couple of days time I’ll be presenting on Microsoft Loop at the Modern Workplace Conference in Paris (MWCP). It’s my second time lucky. I am very proud to be returning to such a prestigious event given it was the one that got me interested in the circuit in the first place. Vesku and I will be teaming up again once more. Last year we talked about Teams as a Platform. This year I guess you could say we are also talking about Teams as a Platform exploring Loop Components, their intricacies, and other aspects we’ve investigated like compliance and flows. It’s all very exciting given that they are only just rolling out into Ring 4 (GA) from preview. Now, earlier today whilst doing the prep work something caught my eye. You know the score. In the ever changing landscape of cloud apps things pop up out of nowhere. But this I had to do a double take on. The Microsoft 365 Admin App – yes, the admin app as in the awesome one you get on your phone via the apple store to manage aspects of your tenant and review service health – its now surfaced into Teams. Now before I start getting too carried away I am sure as a v1.0 it isn’t going to have parity with the current admin app, or anywhere near the web version. So even before looking at it I am going to set my expectations low. But imagine. Imagine how handy considering how much we work in Teams if you could just spin up a user or a Team by launching it off the app rail. Also, on first thoughts, it’s probably not an app we are going to want to make accessible for the majority of our users in Teams so we’ll probably need to whip out some app permissions policies considering these things get launched with a default of on.

All good? Let’s go.

This blog will cover

  • Finding/Enabling/Disabling the Microsoft 365 Admin App in Teams Admin Centre
  • Setting an App Permission Policy
  • Finding and Adding the Microsoft 365 Admin App in Teams
  • Adding a User
  • Adding a Team (and Microsoft 365 Group)
  • Adding/Modifying User Account (Azure AD) Information
  • Admin App Functionalities
  • Closing Thoughts

Note this blog may have some abridged steps which will assume some experience with a Microsoft 365 environment and Teams

Prerequisites

  • Microsoft 365 Licence which includes Teams
  • Global Administrator/User Administrator role
  • An App Permission Policy permitting the app

FINDING/ENABLING/DISABLING THE MICROSOFT 365 ADMIN APP IN TAC

1.) Login to https://login.microsoftonline.com

2.) From the waffle, or from the left app rail, select Admin

3.) In the Microsoft 365 admin centre, from the left navigation, select Show All and then Teams

4.) In the Teams Admin Centre select Teams Apps then Manage Apps

5.) Search for Admin and the Microsoft 365 Admin App Appears. It is on by default. Select it should you want to enable or disable it

6.) Should you want to disable it you can slide off. Should you want to enable slide on

SETTING AN APP PERMISSIONS POLICY

Setting up an app permission policy is recommended since it is unlikely an admin will want to make this app available to general users. Since the global org wide policy is generally used for most users, this would involve creating a custom policy for admins and changing the global org wide default policy to ensure the Microsoft 365 admin app isn’t shown in the Teams app store for most. This scenario as just outlined will be covered: your own scenario may be a little different (E.g., you have many more policies to configure) but it should be similar in principal to apply: the aim ought to be blocking the app from all non-admin users

1.) Under Teams Apps select Permission Policies

2.) Select Add

3.) Set a name for the custom permissions policy for administrators. Set the permissions for Microsoft Apps, Third Party Apps and Custom Apps. This example shows all are permitted for administrators. Once done select Save

4.) The policy has been created. Assign the new custom policy to your administrators via any one of a number of methods including direct assign or bulk via Users, or via PowerShell. Once done, return to permission policies and select Global Org Wide Default

5.) Under Third Party Apps change to Block Specific Apps and Allow All Others and then search, add and Block the Admin – Microsoft 365 App. Once done, select Save.

6.) The app policy may take up to 24 hours to apply. Strange it is under Third Party Apps as the publisher is Microsoft

FINDING THE MICROSOFT 365 ADMIN APP IN TEAMS

1.) Login to the Teams Desktop App or the Web App at https://teams.microsoft.com

2.) Select Apps on the left app rail

3.) In the Teams App Store search for Admin and select Admin – Microsoft 365

4.) Select Add

5.) App now opens on the App Rail

6.) Right click on the Icon and select Pin to pin it

7.) Alternatively you could set this up from the Teams Admin Centre using an App Setup Policy for your admins

ADDING A USER

1.) The first thing to look at here is adding a user to the organisation. Under Your Organisation and under Users select Add a User

2.) Add the licence (in this account a spare Office 365 E3 was available). Add the details of the user including First Name, Last Name, User Name, Domain. There are the familiar options of adding a password manually or automatically, whether this is emailed to the user and whether the user has to change the password once logged in for the first time. Once done, select Add User

3.) The User has now been added

ADDING A TEAM (AND MICROSOFT 365 GROUP

1.) Under Your Organisation and under Teams select Add a Team

2.) This begins a Wizard. Add a Name and Description, then select Next

3.) Select the Team Owners then select Next

4.) Select the Team Members then select Next

5.) Set the email address and the Team Privacy (Public or Private) and then select Next

6.) Review and select Add Team

7.) The team is created

ADDING/MODIFYING ACCOUNT (AZURE AD) INFORMATION

Perhaps the best functionality of this app v1.0 is to easily modify account (Azure AD Information

1.) Click on the user

2.) Here you can do several things including

  • Change username
  • Reset Password
  • Block Sign In
  • Delete User
  • Add/Modify/Remove Aliases
  • Add/Modify/Remove from Groups
  • Add/Modify/Remove Administrative (Azure AD) Roles
  • Add/Modify/Remove Contact Information

ADMIN APP FUNCTIONALITIES

At the moment, the app is very simple, but here’s the essentials from what I tested. This list is not exhaustive and you may spot additions to this (or more may be added soon)

  • Add a User
  • Delete a User
  • Add a Team
  • Delete a Team
  • Reset a User Password
  • Assign a Licence to a User
  • Remove a Licence from a User
  • Change username
  • Block Sign In
  • Delete User
  • Add/Modify/Remove Aliases
  • Add/Modify/Remove from Groups
  • Add/Modify/Remove Administrative (Azure AD) Roles
  • Add/Modify/Remove Licences
  • Add/Modify/Remove Apps
  • Add/Modify/Remove Contact Information
  • Add Subscriptions
  • Extend Subscriptions
  • Cancel Subscriptions
  • Add Payment Method
  • Check Invoices
  • Check Billing Profile

CLOSING THOUGHTS

A solid start to the Microsoft 365 admin app v1.0 in Microsoft Teams. There is lots more to add including Service Status, Support Tickets, Notifications, Message Centre, Org Profile and Release Preferences. It may also be beneficial to have it disabled by default so admins can configure it’s use and app permissions before it’s out there in the wild.

According to the app itself, the added bonus over the current Microsoft 365 admin app is the ability to purchase subscriptions. This is all good if you are in a direct billing relationship with Microsoft, but organisations who go via CSP will have their own ways to purchase licensing through their provider. CSP’s may want to see Microsoft add an ability to disable or restrict this in the future due to licencing confusion and split billing.

Talking about the future I don’t know if this app is intended to replace the actual admin app which is downloadable from from Apple/Android Store. Maybe. It would make sense to consolidate the apps. It would also probably save Microsoft on cost.

For the admin, there is an intriguing scenario on the mobile. As this is now an app in Teams, and you can have multiple profiles, installing the app into multiple tenants should mean that you can access multiple admin centres from a single device.

avatar
Chris Hoardhttps://microsoft365pro.co.uk/
I am interested in literally everything across the Microsoft 365 stack including Exchange, SharePoint, OneDrive, Stream, Yammer, Forms, Flow, Power BI, Azure AD, Microsoft Threat Protection and Intune.

Related Articles

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Stay Connected

6,065FollowersFollow
5,933FollowersFollow

Subscribe to our newsletter

To be updated with all the latest news, offers and special announcements.

Latest Articles