Configure additional Recorded User, Supervisor, and Administrator groups in Luware Recording after initial onboarding has been completed.
✅ Precondition: Required Solution Packages
Luware Recording solution packages have limits on the number of Azure Entra synchronisations included. For more information, review the Solution Packages knowledge base article. Contact solutions@luware.com or your customer success specialist for more information.
Overview
This article covers the steps to configure additional user groups for use in Luware Recording after your initial onboarding has been completed. Decide which type of user group you require:
- Recorded Group: Members of this group are granted the Microsoft Teams Compliance Recording Policy and are enabled in Luware Recording for capture and archive. These are licensed users in the Luware Recording system.
- Supervisor Group: Members of this group have access to the captured conversations of the Recorded Users.
- Administrators: Members of this group can access the underlying configuration of the Luware Recording environment.
Group Creation
Sign in to the Microsoft Entra Admin Center.
Browse to Entra ID > Groups > Overview.
Select New group, give the group an appropriate name, and ensure the type is set to Security.
Click No members selected and add your team members to the group.
Click Create.
Important!
If the group is a Supervisor or Administrator group, you can proceed to Synchronise the Group with Luware Recording.
Recorded User Group Additional Configuration
To enable Luware Recording to capture users in the security groups, compliance policies must be assigned to users. Luware recommends applying policies to the Azure Entra security groups created earlier, which will be used for synchronisation into Luware Recording.
Find the Group Object ID
✅ Collect the Group Object ID
To apply the policy to a group, first collect the Group Object ID from Azure Entra.
- Log in to the Entra Portal.
- From the left navigation, click Groups.
- From the left navigation, click All Groups.
- Search for the Recorded User group created in the previous section.
- Click the Recorded User group name.
- Copy the Object ID.
☝ Warning About Granting Policies
If you are using Fail Close, when the policy is granted to the security group, all users within that group will have the policy applied within 24 hours. If the Luware Recording setup is not completed, users will not be able to initiate or receive calls. Luware recommends adding a test user to the group before going live.
Luware does not support granting compliance recording policies to the tenant.
Grant the Compliance Recording Policy
Install the Teams Module and Connect Using PowerShell
✅ Run the Following Steps in PowerShell ISE
Follow these steps within PowerShell ISE on your local machine.
Open PowerShell ISE on your local machine with Administrator permissions, as you will be importing new modules.
Run the commands below from within your script pane.
-
Import-Module MicrosoftTeamsdownloads the Microsoft Teams PowerShell module.Import-Module MicrosoftTeams - After installation,
Connect-MicrosoftTeamsauthenticates against the Azure Entra environment.Connect-MicrosoftTeams - Sign in with the Azure Entra account that has the Global Administrator or User Administrator role assigned.
The authentication sign-in box appears as a pop-up.
Grant the Policy
✅ Grant the Compliance Recording Policy
Follow the instructions below to grant the Compliance Recording Policy.
☝ Policy Application Delay
Microsoft states compliance policy assignment can take up to 24 hours to apply; in most cases, this occurs within an hour.
Obtain the Name of Your Recording Policy
If you already know the name of your Microsoft Teams Compliance Recording policy, proceed to the next step.
- Copy the command into PowerShell ISE on your local machine, or use the editor in Azure Cloud Shell.
Script:
Get-CsTeamsComplianceRecordingPolicyGrant to an Azure Entra Group
To grant the Compliance Recording Policy to an Azure Entra Group, you need the Object ID of the group.
- Copy the command into PowerShell ISE on your local machine, or use the editor in Azure Cloud Shell.
- Replace
<AzureGroupObjectId>with the Group Object ID copied in the previous section. - Replace
<CompliancePolicyName>with the name of the policy obtained in the previous step.
Script:
New-CsGroupPolicyAssignment -GroupId "<AzureGroupObjectId>" -PolicyType TeamsComplianceRecordingPolicy -PolicyName "<CompliancePolicyName>"Example:
New-CsGroupPolicyAssignment -GroupId 085fd5ee-756a-4284-b81d-a62549f12293 -PolicyType TeamsComplianceRecordingPolicy -PolicyName "luwarerecordingfailclose1"Check a Granted Policy
✅ Verify the Policy Assignment
After a policy is created, verify the assignment using the command below. This shows the policy is applied even if Microsoft has not completed the action on the Microsoft 365 backend.
Check a Policy on an Azure Entra Group
Script:
Get-CsGroupPolicyAssignment -GroupId <AzureGroupObjectId>Example:
Get-CsGroupPolicyAssignment -GroupId 085fd5ee-756a-4284-b81d-a62549f12293Synchronise the Group with Luware Recording
Once your groups have been configured, you are ready to synchronise them with the Luware Recording system. You should have at least one user in the group to allow a successful synchronisation.
To do this, raise a ticket via the support portal or via the support email address support@luware.com.
The ticket should include the following details. You can copy this table and complete it on the ticket if you wish.
| Detail | Value |
|---|---|
| Group Name | |
| Group Role | Recorded User, Supervisor, or Administrator |
| Recording Configuration |
For a Recorded User group, include the configuration required:
|
| Group Access | For a Supervisor group, list the groups they should have recording visibility of. |
Your ticket is processed by Luware, and the user group is synchronised with the system. You will be notified via the ticket once the group is available on the system.