Granting Consent to Providers to Perform Enterprise Provisioning

Prev Next

Note to the provider

When creating or editing the enterprise in the Service Portal, the provider (the Reseller) will be presented with the option to “Request Consent for Enterprise Management”.

Introduction

The service provider may ask the enterprise to grant consent that would enable the service provider to carry out some actions on the enterprise’s behalf.

After the Enterprise Admin grants consent, the service provider will be able to perform the tasks enumerated below without additional interaction from the Enterprise Admin.

Direct Routing

Setup Direct Routing

Setup Additional Voice Routes

Calling (PBX, Trunk, Call App)

Sync User to Teams

Enable and Disable Calling

Set Up Users Individually or via Bulk Upload

Edit Call App Service Account details

The service provider may request the revocation of a granted consent. For more information, see Resetting Microsoft Permissions Consent.

Grant Consent

When the service provider asks that consents be granted, the Enterprise Admin will see these action buttons in the ConnecttoTeams Enterprise Portal Dashboard.

Click the Grant Consent buttons.

After a successful grant, the Current Status changes from Pending Consent to Granted Consent.



If an error is encountered, see the next section Troubleshooting Steps for more information.

Note

With this consent granted, the service provider can perform most routine actions that previously required the engagement of the Enterprise Admin.  However, certain things still require action on the part of the Enterprise Admin, such as configuring the Call App Service, syncing Apps, and granting of further permissions that may be needed.

Troubleshooting Steps

In certain cases, the Enterprise Admin may encounter error messages when attempting to Grant Consent via the steps above.   The errors look like these:

The steps below may allow the Global Admin to fix settings in their Azure configuration so that the Grant Consent button will work.

The process basically involves going into the Azure AD / Entra admin center and assigning a Role to the Admin who will (later) perform the Grant Consent.   

#1 - Get into Azure AD via O365 Admin Center  

Click the Show All at the bottom of the left navigation pane, and the Identity option will appear. 

Click that which opens Azure AD admin; it might be called “Entra” for reasons known only to Microsoft.

#2 - Get to the “Roles & Admins” page

First, click the Show More link in the left nav pane.

Then, you should see the “Roles & Admins” item.  

Open it, and click on the Roles & admins choice.

On the new pane, use the search pane to search for “Teams” and then click the Teams Administrator link as shown below.

#3 - Add the Global Admin user to the Teams Admin role.   

Yes, the Global Admin can already do all the things that the Teams Admin can do, but this seems to be some sort of necessary magic for some tenants.   When you first get to this page, the list of assignments will probably be empty.

Click the Add assignments.  Search for your user in the popup.  Click that user, and then Save.

Go back to the Enterprise Portal and see if you are able to click the Grant Consent button.

Reseller Monitoring of the Grant Consent Status

The Reseller can monitor the status of the consent request from the Edit Enterprise screen.

The status can also be monitored in the Enterprise Dashboard within Enterprise Admin Action Items table.