ACS - Issue with call connection using INTRA identity

Hi Marcio Goncalves,

Lets follow the below steps:

1. Lets verify ACS Resource has Managed Identity:

• Go to your ACS resource in the Azure portal.
• Under Identity, ensure that System-assigned managed identity is enabled.

1. Assign the Role via Azure Portal:
   • Navigate to Microsoft Entra admin center.
   • Go to Roles and administrators.
   • Search for ACS Call Automation Administrator.
   • If you don’t see this role, it might not be available in your tenant yet. This role is being rolled out progressively.
   • If available, click on the role and select Add assignment.
   • Assign it to the managed identity of your ACS resource.
2. If the Role Is Not Visible:
   • You may need to use Microsoft Graph API or Azure CLI to assign the role manually.
   • Alternatively, create a custom role with the necessary permissions:
   • Include actions like:

           Microsoft.Communication/CommunicationServices/CallAutomation/*
     

   • Assign this custom role to the ACS resource's managed identity.
3. Admin Consent:
   • Ensure that admin consent has been granted for the ACS app registration in Entra ID.
   • This is required for Teams interop scenarios.
4. Use the Correct Identity Type:
   • For Teams interop, you must use Microsoft Entra ID (intra) authentication, not the ACS connection string.

Let me know if you need further assistance.