💡 Our Technical Review in summary
Microsoft is introducing a new built-in Role-Based Access Control (RBAC) role called the Teams External Collaboration Administrator. This role is designed to delegate the management of external federation settings and domain-specific access policies within Microsoft Teams. The rollout is scheduled to begin in early February 2026 and is expected to reach completion by mid-February 2026.
Impact
- Granular Delegation: Organizations can now assign specific permissions for managing external communication without granting full Teams Administrator or Global Administrator privileges.
- Management Scope: Assigned users can manage external access settings for federated domains and configure External Access Policies to allow or block specific external domains.
- PowerShell Exclusive: Unlike other Teams roles, this role does not grant access to the Teams admin center (TAC) portal. All management tasks must be performed via PowerShell.
- Administrative Unit Support: This role cannot be assigned to Administrative Units (AUs) at this time.
- Assignment: Global Administrators can assign this role via the Microsoft Entra admin center or the Microsoft 365 admin center.
Action Required
- Identify Candidates: Determine which staff members (e.g., security officers or collaboration leads) should be delegated authority over external federation settings.
- Prepare Scripts: Since this role is limited to PowerShell, ensure that the designated administrators are familiar with the Microsoft Teams PowerShell module and have the necessary scripts ready for managing federation.
- Update Documentation: Revise internal IT governance and RBAC documentation to include this new role and its specific limitations.
- Internal Training: Inform help desk and administrative staff that this role will not provide visibility into the Teams admin center UI.
Microsoft Official Update
Service: N/A
Category: stayInformed
Severity: normal
Updated January 30, 2026: We have updated the timeline. Thank you for your patience.
[Introduction]
We’re excited to announce the rollout of a new built-in role-based access control (RBAC) role in the Microsoft Teams admin center called Teams External Collaboration Administrator. This role provides targeted administrative capabilities for managing external collaboration settings (Federation) in Teams, enabling organizations to delegate responsibilities securely without granting full Teams admin permissions.
[When this will happen:]
General Availability (Worldwide): We will begin rolling out in early February 2026 (previously late January) and expect to complete by mid-February 2026.
[How this will affect your organization:]
- Who is affected: Admins who manage external collaboration settings in Microsoft Teams.
- What will happen:
- A new RBAC role, Teams External Collaboration Administrator, will be available.
- Key capabilities include:
- Manage external access settings for federated domains.
- Manage External Access Policies to allow or disallow external domains.
- Role limitations:
- No access to the Teams admin center portal; management is only through PowerShell.
- Assignment to Administrative Units is not supported.
- Global admins can assign or unassign this new RBAC role from the Microsoft Entra admin center or Microsoft 365 admin center.
[What you need to do to prepare:]
This rollout will happen automatically by the specified dates with no admin action required before the rollout.
To prepare:
- Notify your Global admins about the availability of this new role.
- Update internal documentation and training materials to reflect the new role and its capabilities.
- Learn more:
[Compliance considerations:]
No compliance considerations identified; review as appropriate for your organization.
