MS-700 Practice Exam Questions | Microsoft 365 Certified: Teams Administrator Associate

To create a Microsoft 365 group named TeamsAdmin that can manage Teams Phone configurations without being able to manage teams and channels, you need to use PowerShell to create the group and assign the Teams Communications Administrator role to it. Here are the steps to follow:

Install the Azure Active Directory PowerShell for Graph module by running the following cmdlet:

Install-Module -Name AzureAD

Connect to Azure Active Directory by running the following cmdlet and entering your Microsoft 365 username and password:

Connect-AzureA Create a new Microsoft 365 group named TeamsAdmin by running the following cmdlet:

New-AzureADMSGroup -DisplayName " TeamsAdmin " -Description " Group for managing Teams Phone configurations " -MailEnabled $false -MailNickName " TeamsAdmin " -SecurityEnabled $true -GroupTypes " Unified "

Get the object ID of the new group by running the following cmdlet:

Get-AzureADMSGroup -Filter " DisplayName eq ' TeamsAdmin ' "

Copy the object ID from the output and assign it to a variable, such as $groupID, by running the following cmdlet:

$groupID = " your-object-i Install the Microsoft Teams PowerShell module by running the following cmdlet:

Install-Module -Name MicrosoftTeams

Connect to Microsoft Teams by running the following cmdlet and entering your Microsoft 365 username and password:

Connect-MicrosoftTeams

Get the role ID of the Teams Communications Administrator role by running the following cmdlet:

Get-CsOnlineRole -Identity " Teams Communications Administrator "

Copy the role ID from the output and assign it to a variable, such as $roleID, by running the following cmdlet:

$roleID = " your-role-id "

Assign the Teams Communications Administrator role to the TeamsAdmin group by running the following cmdlet:

New-CsOnlineRoleAssignment -SecurityGroupId $groupID -RoleDefinitionName $roleID

Now, you have created a Microsoft 365 group named TeamsAdmin that can manage Teams Phone configurations without being able to manage teams and channels. You can add members to this group by using the Azure Active Directory admin center or PowerShell.

To prevent unauthenticated users from joining Teams meetings, you need to turn off the anonymous meeting join feature in Teams. Here are the steps to follow:

Sign in to the Teams admin center with your admin credentials.

Go to  Meetings   >   Meeting settings .

Under  Participants , set  Anonymous participants can join a meeting  to  Off .

Click  Save  to apply the changes.

To ensure that only users from litwareinc.com can be added to Teams as guest users, you need to configure the guest access settings in Azure Active Directory (AAD). Here are the steps to follow:

Sign in to the Azure portal with your admin credentials.

Go to Azure Active Directory  >  External identities  >  External collaboration settings.

Under Collaboration restrictions, select Allow invitations only to the specified domains (most restrictive).

In the Allow invitations to these domains box, enter litwareinc.com. You can also add more domains if you want, separated by commas.

Click Save to apply the settings.

That’s it. You have successfully restricted the guest access in Teams to a specific domain. This means that only users with email addresses from litwareinc.com can be invited as guests to your teams.  You can also prevent guests from being added to a specific team by using sensitivity labels 1  or PowerShell 2 .