Teams Identity and Access Management Flashcards

A user reports they can no longer access Teams after a recent Azure AD Conditional Access policy change. What is the fastest way to identify the blocking policy?

Answer: Review Azure AD sign-in logs for the user and check CA policy details

Azure AD sign-in logs show exactly which Conditional Access policy blocked access and the specific condition that triggered the block.

What Azure AD setting controls whether external users can be invited as guests to Teams?

Answer: External collaboration settings (B2B) in Azure AD

Azure AD External Collaboration Settings (B2B) controls whether guests can be invited to the organization; this is a prerequisite for Teams guest access.

A Teams channel is showing as read-only for a user who should be a member. What should you check?

Answer: User's team role (Owner vs. Member) and channel moderation settings

Channel moderation settings can restrict posting to owners only, and if a user is a member (not owner), they may see the channel as read-only.

Which Teams admin center report shows which users have not adopted Teams after a rollout?

Answer: Teams usage report showing inactive users

The Teams usage report in the Teams admin center shows active and inactive users, helping identify who has not adopted Teams after deployment.

A user in a Teams channel cannot @mention the entire team. What setting controls this?

Answer: Channel moderation settings with team @mentions controlled by owners

Channel moderation settings allow team owners to control whether members can use @team mentions, preventing notification spam.

What is the effect of setting 'TeamsOnly' upgrade mode for a user?

Answer: All chats, calls, and meetings use Teams; Skype for Business is disabled

TeamsOnly mode routes all incoming chats, calls, and meeting scheduling through Teams, and Skype for Business functionality is disabled for that user.