Experts Live 2019 - Microsoft Teams Architecture Deep Dive
Download as PPTX, PDF1 like821 views
The document provides an in-depth look at Microsoft 365 Teams architecture, including roles, settings, and administrative controls. It outlines team management functionalities, such as creating and editing teams and channels, and adjusting settings for membership and external guest access using PowerShell. Additionally, it covers directory settings and naming conventions for groups within Microsoft 365.
![MICROSOFT 365
Allow only specific people to create Teams
Azure Active Directory versie 2 PowerShell module required
Connect-AzureAD
Get-AzureADDirectorySetting
$Policy = Get-AzureADDirectorySettingTemplate –Id 62375ab9-
6b52-47ed-826b-58e47e0e304b
$Setting = $Policy.CreateDirectorySetting()
$Setting[“EnableGroupCreation”] = “false”
$Setting[“GroupCreationAllowedGroupId”] = “your group ID”
New-AzureADDirectorySetting -DirectorySetting $Setting
https://docs.microsoft.com/en-
us/powershell/azure/overview?view=azureadps-2.0](https://image.slidesharecdn.com/expertslive19microsoftteamsarchitecturedeepdivemaarteneekels-190606142250/85/Experts-Live-2019-Microsoft-Teams-Architecture-Deep-Dive-12-320.jpg)
![MICROSOFT 365
External guest access
• Default setting: Off for tenants / On for individual Teams
• Disabling or enabling external guest user access for individual Teams is only
possible through PowerShell
$template = Get-AzureADDirectorySettingTemplate | ? {$_.displayname -eq
"group.unified.guest"}
$settings = $template.CreateDirectorySetting()
$settings["AllowToAddGuests"]=$False
$groupID = (Get-AzureADGroup -SearchString “<your group name").ObjectId
Get-AzureADObjectSetting -TargetObjectId $groupID -TargetType Groups | fl Values
New-AzureADObjectSetting -TargetObjectId $groupID -TargetType Groups
-DirectorySetting $settings
Get-AzureADObjectSetting -TargetObjectId $groupId -TargetType Groups | Set-
AzureADObjectSetting -TargetObjectId $groupId -TargetType Groups -
DirectorySetting $settings](https://image.slidesharecdn.com/expertslive19microsoftteamsarchitecturedeepdivemaarteneekels-190606142250/85/Experts-Live-2019-Microsoft-Teams-Architecture-Deep-Dive-13-320.jpg)
![MICROSOFT 365
Naming conventions
Get-AzureADDirectorySetting
$directorySetting = Get-AzureADDirectorySetting -Id 92efeacc-
89c6-4c16-b1cf-107aaf87f7dc
$directorySetting.Values
$directorySetting["PrefixSuffixNamingRequirement"] =
"Grp_[Department]_[GroupName]"
$directorySetting["CustomBlockedWordsList"]="Payroll,CEO,HR"
Set-AzureADDirectorySetting -Id (Get-AzureADDirectorySetting |
where -Property DisplayName -Value "Group.Unified" -EQ).id -
DirectorySetting $directorySetting](https://image.slidesharecdn.com/expertslive19microsoftteamsarchitecturedeepdivemaarteneekels-190606142250/85/Experts-Live-2019-Microsoft-Teams-Architecture-Deep-Dive-16-320.jpg)
Experts Live 2019 - Microsoft Teams Architecture Deep Dive
- 1. MICROSOFT 365 Microsoft Teams Architecture Deep Dive Maarten Eekels - @maarteneekels
- 3. MICROSOFT 365 Teams logical architecture
- 4. MICROSOFT 365 Where is everything stored?
- 5. MICROSOFT 365 Outside the compliancy perimeter
- 7. MICROSOFT 365 Memberships and roles Team Owner Team Member Team Guest Create team - - Leave team Edit team name/description - - Delete team - - Add channel * * Edit channel name/description * * Delete channel * * Add members - - Add tabs * - Add connectors * - Add bots * - * Can be restricted through Team Settings by the owner
- 8. MICROSOFT 365 Teams admin roles • Teams Service Administrator: The overall Teams workload admin, who can also manage and create O365 Groups. • Teams Communication Administrator: This role can manage meetings and calling functionality in Microsoft Teams. • Teams Communications Support Engineering: Users who are assigned this role have access to advanced call analytics tools. • Teams Communications Support Specialist: This role has access to basic call analytics tools.
- 9. MICROSOFT 365 Teams settings on tenant level
- 10. MICROSOFT 365 Settings on team level
- 11. MICROSOFT 365 Manage Teams with PowerShell Install-Module -Name MicrosoftTeams Get-Team $groupId = (Get-AzureADGroup -SearchString “<group name>").objectId Get-Team -GroupId $groupId | fl Set-Team -GroupId $groupId -<setting name> <boolean>
- 12. MICROSOFT 365 Allow only specific people to create Teams Azure Active Directory versie 2 PowerShell module required Connect-AzureAD Get-AzureADDirectorySetting $Policy = Get-AzureADDirectorySettingTemplate –Id 62375ab9- 6b52-47ed-826b-58e47e0e304b $Setting = $Policy.CreateDirectorySetting() $Setting[“EnableGroupCreation”] = “false” $Setting[“GroupCreationAllowedGroupId”] = “your group ID” New-AzureADDirectorySetting -DirectorySetting $Setting https://docs.microsoft.com/en- us/powershell/azure/overview?view=azureadps-2.0
- 13. MICROSOFT 365 External guest access • Default setting: Off for tenants / On for individual Teams • Disabling or enabling external guest user access for individual Teams is only possible through PowerShell $template = Get-AzureADDirectorySettingTemplate | ? {$_.displayname -eq "group.unified.guest"} $settings = $template.CreateDirectorySetting() $settings["AllowToAddGuests"]=$False $groupID = (Get-AzureADGroup -SearchString “<your group name").ObjectId Get-AzureADObjectSetting -TargetObjectId $groupID -TargetType Groups | fl Values New-AzureADObjectSetting -TargetObjectId $groupID -TargetType Groups -DirectorySetting $settings Get-AzureADObjectSetting -TargetObjectId $groupId -TargetType Groups | Set- AzureADObjectSetting -TargetObjectId $groupId -TargetType Groups - DirectorySetting $settings
- 16. MICROSOFT 365 Naming conventions Get-AzureADDirectorySetting $directorySetting = Get-AzureADDirectorySetting -Id 92efeacc- 89c6-4c16-b1cf-107aaf87f7dc $directorySetting.Values $directorySetting["PrefixSuffixNamingRequirement"] = "Grp_[Department]_[GroupName]" $directorySetting["CustomBlockedWordsList"]="Payroll,CEO,HR" Set-AzureADDirectorySetting -Id (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ).id - DirectorySetting $directorySetting
- 22. MICROSOFT 365MICROSOFT 365 That’s all folks! Please review my session in the Yellenge App! @maarteneekels