Merge pull request #263646 from rcdun/1169130_operator_connect_ownership

1169130 Document OC/TPM configuration that customers must not change

Author: v-regandowner

articles/communications-gateway/connect-operator-connect.md

@@ -42,7 +42,7 @@ If you want to set up Teams Phone Mobile and you didn't select it when you deplo
 ## Enable Operator Connect or Teams Phone Mobile support
 
 > [!NOTE]
-> If you selected Operator Connect or Teams Phone Mobile when you [deployed Azure Communications Gateway](deploy.md), skip this step and go to [Add the Project Synergy application to your Azure tenancy](#add-the-project-synergy-application-to-your-azure-tenancy).
+> If you selected Operator Connect or Teams Phone Mobile when you [deployed Azure Communications Gateway](deploy.md), skip this step and go to [Add the Project Synergy application to your Azure tenant](#add-the-project-synergy-application-to-your-azure-tenant).
 
 1. Sign in to the [Azure portal](https://azure.microsoft.com/).
 1. In the search bar at the top of the page, search for your Communications Gateway resource and select it.
@@ -55,7 +55,7 @@ If you want to set up Teams Phone Mobile and you didn't select it when you deplo
     > Do not add the numbers for integration testing. You will configure numbers for integration testing when you [carry out integration testing and prepare for live traffic](prepare-for-live-traffic-operator-connect.md).
 1. Wait for your resource to be updated. When your resource is ready, the **Provisioning Status** field on the resource overview changes to "Complete." We recommend that you check in periodically to see if the Provisioning Status field is "Complete." This step might take up to two weeks.
 
-## Add the Project Synergy application to your Azure tenancy
+## Add the Project Synergy application to your Azure tenant
 
 Before starting this step, check that the **Provisioning Status** field for your resource is "Complete".
 
@@ -102,7 +102,9 @@ The user who sets up Azure Communications Gateway needs to have the Admin user r
 1. Select your **Project Synergy** application.
 1. Select **Users and groups** from the left hand side menu.
 1. Select **Add user/group**.
-1. Specify the user you want to use for setting up Azure Communications Gateway and give them the **Admin** role.
+1. Specify the user who should set up Azure Communications Gateway and give them the **Admin** role.
+
+[!INCLUDE [communications-gateway-oc-configuration-ownership](includes/communications-gateway-oc-configuration-ownership.md)]
 
 ## Find the Object ID and Application ID for your Azure Communication Gateway resource
 
@@ -121,7 +123,7 @@ Each Azure Communications Gateway resource automatically receives a [system-assi
 
 ## Set up application roles for Azure Communications Gateway
 
-Azure Communications Gateway contains services that need to access the Operator Connect API on your behalf. To enable this access, you must grant specific application roles to the system-assigned managed identity for Azure Communications Gateway under the Project Synergy Enterprise Application. You created the Project Synergy Enterprise Application in [Add the Project Synergy application to your Azure tenancy](#add-the-project-synergy-application-to-your-azure-tenancy).
+Azure Communications Gateway contains services that need to access the Operator Connect API on your behalf. To enable this access, you must grant specific application roles to the system-assigned managed identity for Azure Communications Gateway under the Project Synergy Enterprise Application. You created the Project Synergy Enterprise Application in [Add the Project Synergy application to your Azure tenant](#add-the-project-synergy-application-to-your-azure-tenant).
 
 > [!IMPORTANT]
 > Granting permissions has two parts: configuring the system-assigned managed identity for Azure Communications Gateway with the appropriate roles (this step) and adding the application ID of the managed identity to the Operator Connect or Teams Phone Mobile environment. You'll add the application ID to the Operator Connect or Teams Phone Mobile environment later, in [Add the Application IDs for Azure Communications Gateway to Operator Connect](#add-the-application-ids-for-azure-communications-gateway-to-operator-connect).

articles/communications-gateway/includes/communications-gateway-oc-configuration-ownership.md

@@ -0,0 +1,15 @@
+---
+author: rcdun
+ms.author: rdunstan
+ms.service: communications-gateway
+ms.topic: include
+ms.date: 01/19/2024
+---
+
+> [!CAUTION]
+> Do not change any of the following Operator Connect configuration in your tenant (whether through the Operator Connect configuration portal or through Operator Connect APIs).
+> 
+> - Calling Profiles with a `CommsGw` **Suffix** in the configuration portal or **NameSuffix** on the Operator Connect APIs
+> - Trunks with FQDNs ending with `.commsgw.azure.com`
+> 
+> We manage this configuration for you. Editing this configuration is likely to cause issues with your Azure Communications Gateway service.

articles/communications-gateway/interoperability-operator-connect.md

@@ -5,7 +5,7 @@ author: rcdun
 ms.author: rdunstan
 ms.service: communications-gateway
 ms.topic: conceptual
-ms.date: 09/01/2023
+ms.date: 01/31/2024
 ms.custom: template-concept
 ---
 

articles/communications-gateway/manage-enterprise-operator-connect.md

@@ -36,7 +36,7 @@ If you're uploading new numbers for an enterprise customer:
 
 |Information for each number |Notes  |
 |---------|---------|
-|Calling profile |One of the Calling Profiles created by Microsoft for you.|
+|Calling profile |One of the `CommsGw` Calling Profiles we created for you.|
 |Intended usage | Individuals (calling users), applications or conference calls.|
 |Capabilities     |Which types of call to allow (for example, inbound calls or outbound calls).|
 |Civic address | A physical location for emergency calls. The enterprise must have configured this address in the Teams Admin Center. Only required for individuals (calling users) and only if you don't allow the enterprise to update the address.|
@@ -56,6 +56,7 @@ Numbers
 +441632960004
 ```
 
+[!INCLUDE [communications-gateway-oc-configuration-ownership](includes/communications-gateway-oc-configuration-ownership.md)]
 
 ## Go to your Communications Gateway resource
 

articles/communications-gateway/prepare-for-live-traffic-operator-connect.md

@@ -36,9 +36,11 @@ In this article, you learn about the steps that you and your onboarding team mus
 
     |Configuration portal  |Required permissions |
     |---------|---------|
-    |[Operator Connect portal](https://operatorconnect.microsoft.com/) | `Admin` role or `PartnerSettings.Read` and `NumberManagement.Write` roles (configured on the Project Synergy enterprise application that you set up when [you connected to Operator Connect or Teams Phone Mobile](connect-operator-connect.md#add-the-project-synergy-application-to-your-azure-tenancy))|
+    |[Operator Connect portal](https://operatorconnect.microsoft.com/) | `Admin` role or `PartnerSettings.Read` and `NumberManagement.Write` roles (configured on the Project Synergy enterprise application that you set up when [you connected to Operator Connect or Teams Phone Mobile](connect-operator-connect.md#add-the-project-synergy-application-to-your-azure-tenant))|
     |[Teams Admin Center](https://admin.teams.microsoft.com/) for your test tenant |User management|
 
+[!INCLUDE [communications-gateway-oc-configuration-ownership](includes/communications-gateway-oc-configuration-ownership.md)]
+
 ## Methods
 
 In some parts of this article, the steps you must take depend on whether your deployment includes the Number Management Portal. This article provides instructions for both types of deployment. Choose the appropriate instructions.
@@ -61,7 +63,7 @@ Integration testing requires setting up your test tenant for Operator Connect or
 > [!IMPORTANT]
 > Do not assign the service verification numbers to test users. Your onboarding team arranges configuration of your service verification numbers.
 
-1. Ask your onboarding team for the name of the Calling Profile that you must use for these test numbers. The name typically has the suffix `commsgw`. This Calling Profile was created for you during the Azure Communications Gateway deployment process.
+1. Ask your onboarding team for the name of the Calling Profile that you must use for these test numbers. The name typically has the suffix `CommsGw`. We created this Calling Profile for you during the Azure Communications Gateway deployment process.
 1. In your test tenant, request service from your company.
     1. Sign in to the [Teams Admin Center](https://admin.teams.microsoft.com/) for your test tenant.
     1. Select **Voice** > **Operators**.