MS Teams Direct Rouing - CallTower Service Account Implementation
Goal
After completing this how-to you will have an account to provide to your CallTower Implementation Manager or Support contact, or to directly populate in CallTower Connect.
First Step
Begin by Launching your Microsoft 365 Admin Center and browsing to the Users section.
Second Step
Then continue with by clicking on "Add a user" and fill out the form. You may use any Name required to signify the purpose of this account. We recommend generating a password with new fewer then 24 characters, you may use this 3rd party service to generate that password:
Enter the Email Address of your Project Manager, Support Rep or Yourself as needed. Then Click Next.
Third Step
Select "Create user without product license"
Then Click Next.
Fourth Step
Select "Admin center access" then select "Global Administrator" and "Teams Administrator".
use the "Show all by category" drop down and select "Skype for Business Administrator" as well.
Then Click Next.
Important Note: The "Global Administrator" role is temporary and this role should be removed after the service has been enabled. "Global Administrator" role is only required to add the sub domains for access to CallTower SBC's as well as adding activation users to those domains with the correct licensing. Once that process has completed only the "Teams Administrator " and "Skype for Business Administrator" roles are required so that CallTower Connect can assign numbers to both users and resource accounts.
Fifth Step
Review the final configuration of the service account.
If everything appears correctly click "Finish adding".
Copy any details you need to retain then click "Close"
IMPORTANT NOTE: Check to make sure this service account is excluded from any Conditional Access Rules or MFA requirements. CallTower Connect, Will be unable to process the required PowerShell to configure your tenant when MFA is enforced for the account.
- CallTower Datacenter IP Addresses for MFA Exclusions: 205.196.174.0/24 and 69.4.184.0/24
What's Next
Confirm you have Two available licenses available for activation of the SBC domains that will be added to the Tenant.
- The licenses will need to include Teams. E1, E3, E5, F3, Business Basic-Premium. Teams Exploratory, etc
- The activation users will be created and removed during the automated process.
Next confirm with your CallTower Project Manager or Support Rep that they have received the username and password in email.
GCC High / No AA or CQ Build Needed:
Alternatively you can populate the username and password directly into your CallTower Connect portal. If you do not provide the credentials to CallTower and populate them within Connect yourself you will have to schedule a separate activation call with your project manager. During the activation call we will add the SBC Domains to the tenant, as well as activation users before the service can be turned on.
First request an account from your Project Manager and sign into Connect (calltower.com)
Browse to Menu > Administration > Corporate Administration > Settings > Teams Settings
Then Populate the user name with the full user username and password:
Click the Save Icon and let your Project Manager know that the service account has been added to connect.
Note: If you do not provide this account to your Project Manager we will be unable to build any Auto Attendants, Call Queues, or Extension Dialing previously quoted.
Information:
Connect automation will use the Global Administrator role to add two domains to your tenant one for each SBC, once the domains are added an activation user will be created on each of those domains and given a license which includes Microsoft Teams. Once the activation users are in place Connect will be able to create the PSTN Gateways within the voice routing policy, at which point the activation users can be removed and the Global Administrator role will no longer be required.