Teams Mobile Dialer (Tango Extend) – Teams Admin Process Guide
Overview of Requirements
Before onboarding users to Tango Extend, the Teams Administrator must ensure the following are in place:
- SIP Gateway enabled – The organization’s Teams environment supports SIP devices. The calling policy for each user must have “SIP devices can be used for calls” turned on.
- Teams Phone number assigned – Each user has a valid Teams Phone line (DID), Operator Connect, or Direct Routing arrangement.
- Extend app access configured – The Tango Extend provisioning app (Teams Mobile Dialer app) is Allowed in Teams, the app’s required permissions are granted (admin consent), and Teams app permission policies are set to control who can use the app.
- Supported device – The end-user’s mobile device must be eSIM-capable, supported by Tango Extend, and carrier unlocked (not SIM-locked to a carrier).
1. Verify User Access to Microsoft SIP Gateway
To use Teams Mobile Dialer, your tenant must have the SIP Gateway service enabled and configured:
- Sign in to the Teams Admin Center (TAC) as an administrator.
- In the left navigation, go to Teams devices. Verify that the SIP devices tab is visible (under Teams devices). If you can see a “SIP devices” section, then SIP Gateway is available for your organization. If not, you may need to enable SIP Gateway for your tenant (contact Microsoft support if required).
- Still in Teams Admin Center, navigate to Voice > Calling policies. Select your global calling policy (or the specific policy assigned to these users), then click Edit.
- In the calling policy settings, enable the option “SIP devices can be used for calls” (turn it On). Save the policy.
- If the affected users do not already have this calling policy, assign the policy to them. In TAC, go to Users > Manage Users, select the user, and under Policies assign the calling policy that has SIP devices enabled.
2. Verify Users Have Teams Phone Numbers (DID)
Each user who will use the mobile dialer must have an active phone number in Teams (either via Operator Connect, or Direct Routing):
- In Teams Admin Center, go to Users > Manage Users, then select the user in question.
- Under the user’s Account or Voice details, verify that an Assigned Phone Number is present. Check that the Number type is Operator Connect or Direct Routing (or a Microsoft Calling Plan) as required. Ensure the number is correctly assigned as the user’s Teams telephone line (DID).
- If a user is missing a number, assign a phone number to the user before proceeding (via Operator Connect provisioning or Direct Routing configuration, per your environment). Ensure the user’s Teams license and calling plan are properly in place.
3. Configure Access to the Tango Extend App in Teams
This step ensures the Tango Extend provisioning app is allowed in your tenant and that you’ve granted any required permissions:
a. Allow the Extend App in Teams
- In Teams Admin Center, navigate to Teams apps > Manage apps. In the search bar, type “Extend”. Locate the Extend app (the Tango Extend Teams app) in the results.
- Click on the Extend app name to view its details. Ensure that its Status is Unblocked. If it’s showing as Blocked, toggle it to Unblocked. (If the app cannot be allowed or is missing, check Org-wide app settings to confirm that Third-party apps are enabled for your organization.)
b. Review App Permissions and Grant Consent
- Still on the Extend app’s detail page, switch to the Permissions tab (or click the “View details” link in the Permissions column next to the app). You will see a list of Microsoft Graph API permissions that the Extend app is requesting (for example, ability to read user profile, send messages, etc.).
- Click the Review permissions and consent (or Grant admin consent) button. When prompted, authenticate with your Global Admin credentials (only a Global Administrator can grant org-wide consent for third-party app permissions).
- A consent dialog will appear listing the app’s requested permissions. Review these permissions carefully, then click Accept to grant consent for the organization. After acceptance, you should see a confirmation that consent has been granted for the app’s permissions. This ensures end-users won’t be individually prompted for permissions and that the app can function properly.
Note: If the Extend app was already in use, you may have completed the consent in the past. It’s good practice to verify this after any app update, as new permissions might require re-consent. Only custom/third-party apps require this admin consent step – Microsoft-built apps are pre-consented.
4. Limit Extend App to Specific Users or Groups
Using Teams’ app-centric management (the modern method to control app access), you can directly specify which users or groups can use the Tango Extend app. This replaces the older approach of using app permission policies. Follow the steps below to block the Extend app for everyone by default and then allow it only for designated users/groups in one streamlined action:
- In the Teams Admin Center, go to Teams apps > Manage apps. Search for “Extend” and select the Tango Extend app to open its details page.
- Click the Users and groups tab on the Extend app’s page.
- Click the Edit availability button.
- In the Available to dropdown, select Specific users or groups.
- In the Search for users or groups field, add each user or group that should have access to the Extend app. (For example, you might add individual power users or a security group containing all approved Mobile Dialer users.)
- After adding the desired entries, click Apply (or Save) to confirm the changes. The Extend app’s availability will now be set to “Specific users or groups,” with the list of allowed users/groups shown on the app’s detail page.
Result: Only the specified users or groups will be able to discover and use the Tango Extend app in Teams. All other users in the organization will not have access to the app (it will not appear for them in Teams). This ensures the mobile dialer service is restricted to the intended audience and not available tenant-wide.
