SfBO Call Analytics Tier 1 and 2 permisson updates ready for retirement and move into Microsoft Teams and Skype for Business Admin Centre


You may have seen this message in message centre.

“Call Analytics is retiring on February 15, 2019. We’ve rolled out an improved Call Analytics experience in the Microsoft Teams & Skype for Business Admin Center.”

Call Analytics accessible in the Skype for Business Online admin centre (Legacy Portal) is being retired and it will only be available in the Microsoft Teams and Skype for Business Admin Centre from the 15th Feb 2019.


If you had setup Call Analytics previously with permissions (perhaps for your helpdesk or support team) using the Tier 1 and Tier 2 agents permissions groups then you need to set this up for the new Teams Admin centre under the new Teams Admin roles.



By default if Tier 1 or Tier 2 users when they try to access the Teams and Skype admin centre then they will get invalid privilege as they dont have permissons.


So we need to add users to the new Teams RBAC Admin roles so they can access CA in the Team admin centre.

Info on Teams admin roles here

The two groups I’m interested in are Teams Communications Support Engineer and Teams Communications Support Specialist as they seem to map to the previous Tier 1 and Tier 2 roles.


Mapping these to the previous Tier 1 and Tier 2 CA Permissions in SfBO here


Tier 1 is restricted to only show the names of the user the agent searched for and other receipents are masked with “Internal / External User” so this role is restricted more.

Tier 2 can see all recipient names as shown above.


So mapping the previous CA Tier 1 and Tier 2 ive mapped the following:

TIER 1 > Teams Communications Support Specialist

TIER 2 > Teams Communications Support Engineer


I had an existing Security Group with the members in for Call Analytics but it seems i cant reuse this group for the new Teams RBAC roles in Azure AD.

I was looking to try and add the existing group to the Teams Azure AD RBAC roles but this doesn’t seem possible so that leaves adding the members to the group manually.

Also another option if your licenced for it is to use Privileged Identity Management (PIM) to only assign the role when requested.


For this example ill add members directly to the RBAC group.

For Tier 1 I’ve added Lucius to the Teams Communications Support Specialist Role


For Tier 2 ive added Alfred to the Teams Communications Support Engineer Role


Lets go over to the Teams and Skype Admin centre to check. https://admin.teams.microsoft.com


We can now sign in and search for users and view Call Quality Analytics.

Tier 1


Tier 2


Hope this helps with your move to CA in Teams Admin centre.


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.