MS Teams Direct Rouing - CallTower Service Account Implementation

First Step

Begin by Launching your Microsoft 365 Admin Center and browsing to the Users section.

• Active users - Microsoft 365 admin center - Active users

Second Step

Then continue with by clicking on "Add a user" and fill out the form. You may use any Name required to signify the purpose of this account. We recommend generating a password with new fewer then 24 characters, you may use this 3rd party service to generate that password:

• Strong Random Password Generator (passwordsgenerator.net)

Enter the Email Address of your Project Manager, Support Rep or Yourself as needed. Then Click Next.

Third Step

Select "Create user without product license" 

Then Click Next.

Fourth Step

Select "Admin center access" then select "Global Administrator" and "Teams Administrator".

use the "Show all by category" drop down and select "Skype for Business Administrator" as well.

Then Click Next.

  Important Note:  The "Global Administrator" role is temporary and this role should be removed after the service has been enabled. "Global Administrator" role is only required to add the sub domains for access to CallTower SBC's as well as adding activation users to those domains with the correct licensing. Once that process has completed only the "Teams Administrator " and "Skype for Business Administrator" roles are required so that CallTower Connect can assign numbers to both users and resource accounts. 

Fifth Step

Review the final configuration of the service account.

If everything appears correctly click "Finish adding".

Copy any details you need to retain then click "Close"

IMPORTANT NOTE: Check to make sure this service account is excluded from any Conditional Access Rules or MFA requirements. CallTower Connect, Will be unable to process the required PowerShell to configure your tenant when MFA is enforced for the account. 

• CallTower Datacenter IP Addresses for MFA Exclusions: 205.196.174.0/24 and 69.4.184.0/24

GCC High / No AA or CQ Build Needed:

Alternatively you can populate the username and password directly into your CallTower Connect portal. If you do not provide the credentials to CallTower and populate them within Connect yourself you will have to schedule a separate activation call with your project manager. During the activation call we will add the SBC Domains to the tenant, as well as activation users before the service can be turned on.

First request an account from your Project Manager and sign into Connect (calltower.com)

Browse to Menu > Administration > Corporate Administration > Settings > Teams Settings

Then Populate the user name with the full user username and password:

Click the Save Icon and let your Project Manager know that the service account has been added to connect.

Note: If you do not provide this account to your Project Manager we will be unable to build any Auto Attendants, Call Queues, or Extension Dialing previously quoted.

Information:

Connect automation will use the Global Administrator role to add two domains to your tenant one for each SBC, once the domains are added an activation user will be created on each of those domains and given a license which includes Microsoft Teams. Once the activation users are in place Connect will be able to create the PSTN Gateways within the voice routing policy, at which point the activation users can be removed and the Global Administrator role will no longer be required.