Microsoft Entra ID · Teams Communication

Teams Reader

Read-only access to Teams admin center settings and Call Quality Dashboard without management capabilities.

Scope: Read-only access to Teams administration and CQD

Permissions

  • Read Teams admin settings
  • View Call Quality Dashboard
  • Read all Teams properties
  • View basic resources

Common use cases

  • Configuration auditing
  • Settings review
  • Quality monitoring
  • Reporting access

Best practices

  • Use for audit purposes
  • Review settings periodically
  • Escalate issues to admins

Security considerations

  • Read-only reduces risk
  • Cannot access user details
  • No management capabilities

Common questions

When should I assign the Teams Reader role?

Assign Teams Reader when you need to: Configuration auditing; Settings review; Quality monitoring; and Reporting access. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.

What can someone with the Teams Reader role do?

The Teams Reader role grants permissions including: Read Teams admin settings; View Call Quality Dashboard; Read all Teams properties; and View basic resources. See the Permissions section above for the full list.

What are the security risks of the Teams Reader role?

Key considerations when assigning Teams Reader: Read-only reduces risk; Cannot access user details; and No management capabilities. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.

Official Microsoft Learn documentation →

Open the interactive RBACMap →