---
title: "Teams Mobile (Tango Extend) - Teams Admin Process Guide"
slug: "teams-mobile-tango-extend-teams-admin-process-guide"
tags: ["calltower", "public"]
updated: 2026-09-18T13:37:32Z
published: 2026-09-18T13:37:32Z
canonical: "learn.calltower.com/teams-mobile-tango-extend-teams-admin-process-guide"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://learn.calltower.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Teams Mobile (Tango Extend) - Teams Admin Process Guide

## Overview of Requirements

Before onboarding users to **Tango Extend**, the Teams Administrator must ensure the following are in place:

- **SIP Gateway enabled** – The organization’s Teams environment supports SIP devices. The calling policy for each user must have **“SIP devices can be used for calls”** turned on.
- **Teams Phone number assigned** – Each user has a valid Teams Phone line (DID), **Operator Connect**, or **Direct Routing** arrangement.
- **Extend app access configured** – The **Tango Extend** provisioning app (Teams Mobile Dialer app) is **Allowed** in Teams, the app’s required permissions are granted (admin consent), and **Teams app permission policies** are set to control who can use the app.
- **Supported device** – The end-user’s mobile device must be **eSIM-capable**, [supported by Tango Extend](https://tango-networks.com/supported-phones/), and **carrier unlocked** (not SIM-locked to a carrier).

### 1. Verify User Access to Microsoft SIP Gateway

To use Teams Mobile Dialer, your tenant must have the **SIP Gateway** service enabled and configured:

1. **Sign in to the Teams Admin Center** (TAC) as an administrator.
2. In the left navigation, go to **Teams devices**. Verify that the **SIP devices** tab is visible (under Teams devices). If you can see a “SIP devices” section, then SIP Gateway is available for your organization. If not, you may need to enable SIP Gateway for your tenant (contact Microsoft support if required).![clipboard_e936de357f1612e19412c4f37f639184f.png](https://cdn.us.document360.io/4662144b-ab1f-4796-8b7b-e9f9c609894f/Images/Documentation/clipboard_e936de357f1612e19412c4f37f639184f.png?sv=2026-02-06&spr=https&st=2026-11-04T21%3A36%3A53Z&se=2026-11-04T22%3A36%3A53Z&sr=c&sp=r&sig=pgiMIvakFZWXvsPdwOKM1ErurPCP%2BCLeiPqp9FGXQ8E%3D)
3. Still in Teams Admin Center, navigate to **Voice** > **Calling policies**. Select your global calling policy (or the specific policy assigned to these users), then click **Edit**.
4. In the calling policy settings, **enable** the option **“SIP devices can be used for calls”** (turn it **On**). Save the policy. ![clipboard_e815cf5aab76618dea754d6501dae095b.png](https://cdn.us.document360.io/4662144b-ab1f-4796-8b7b-e9f9c609894f/Images/Documentation/clipboard_e815cf5aab76618dea754d6501dae095b.png?sv=2026-02-06&spr=https&st=2026-11-04T21%3A36%3A53Z&se=2026-11-04T22%3A36%3A53Z&sr=c&sp=r&sig=pgiMIvakFZWXvsPdwOKM1ErurPCP%2BCLeiPqp9FGXQ8E%3D)
5. If the affected users do not already have this calling policy, assign the policy to them. In TAC, go to **Users** > **Manage Users**, select the user, and under **Policies** assign the calling policy that has SIP devices enabled. ![clipboard_e7650e9df8bfc31f04513123617972726.png](https://cdn.us.document360.io/4662144b-ab1f-4796-8b7b-e9f9c609894f/Images/Documentation/clipboard_e7650e9df8bfc31f04513123617972726.png?sv=2026-02-06&spr=https&st=2026-11-04T21%3A36%3A53Z&se=2026-11-04T22%3A36%3A53Z&sr=c&sp=r&sig=pgiMIvakFZWXvsPdwOKM1ErurPCP%2BCLeiPqp9FGXQ8E%3D)

### 2. Verify Users Have Teams Phone Numbers (DID)

Each user who will use the mobile dialer must have an active phone number in Teams (either via Operator Connect, or Direct Routing):

1. In Teams Admin Center, go to **Users** > **Manage Users**, then select the user in question.
2. Under the user’s **Account** or **Voice** details, verify that an **Assigned Phone Number** is present. Check that the **Number type** is **Operator Connect** or **Direct Routing** (or a Microsoft Calling Plan) as required. Ensure the number is correctly assigned as the user’s Teams telephone line (DID). ![clipboard_ee2a4f34d228dc09bfaa1a8f109cdb0fb.png](https://cdn.us.document360.io/4662144b-ab1f-4796-8b7b-e9f9c609894f/Images/Documentation/clipboard_ee2a4f34d228dc09bfaa1a8f109cdb0fb.png?sv=2026-02-06&spr=https&st=2026-11-04T21%3A36%3A53Z&se=2026-11-04T22%3A36%3A53Z&sr=c&sp=r&sig=pgiMIvakFZWXvsPdwOKM1ErurPCP%2BCLeiPqp9FGXQ8E%3D)
3. If a user is missing a number, assign a phone number to the user before proceeding (via Operator Connect provisioning or Direct Routing , per your environment). Ensure the user’s Teams license and calling plan are properly in place.

### 3. Configure Access to the Tango Extend App in Teams

This step ensures the Tango Extend provisioning app is allowed in your tenant and that you’ve granted any required permissions:

#### a. Allow the Extend App in Teams

1. In Teams Admin Center, navigate to **Teams apps** > **Manage apps**. In the search bar, type “**Extend**”. Locate the **Extend** app (the Tango Extend Teams app) in the results.
2. Click on the **Extend** app name to view its details. Ensure that its **Status** is **Unblocked**. If it’s showing as Blocked, toggle it to **Unblocked**. (If the app cannot be allowed or is missing, check **Org-wide app settings** to confirm that Third-party apps are enabled for your organization.)

![clipboard_e8c51295307ccf3d606f9e69507bc146a.png](https://cdn.us.document360.io/4662144b-ab1f-4796-8b7b-e9f9c609894f/Images/Documentation/clipboard_e8c51295307ccf3d606f9e69507bc146a.png?sv=2026-02-06&spr=https&st=2026-11-04T21%3A36%3A53Z&se=2026-11-04T22%3A36%3A53Z&sr=c&sp=r&sig=pgiMIvakFZWXvsPdwOKM1ErurPCP%2BCLeiPqp9FGXQ8E%3D)

#### b. Review App Permissions and Grant Consent

1. Still on the Extend app’s detail page, switch to the **Permissions** tab (or click the **“View details”** link in the Permissions column next to the app). You will see a list of Microsoft Graph API permissions that the Extend app is requesting (for example, ability to read user profile, send messages, etc.).
2. Click the **Review permissions and consent** (or **Grant admin consent**) button. When prompted, authenticate with your Global Admin credentials (only a Global Administrator can grant org-wide consent for third-party app permissions).
3. A consent dialog will appear listing the app’s requested permissions. **Review** these permissions carefully, then click **Accept** to grant consent for the organization. After acceptance, you should see a confirmation that consent has been granted for the app’s permissions. This ensures end-users won’t be individually prompted for permissions and that the app can function properly. ![clipboard_e3291b3bc5b36969946a63d41fb49eeb8.png](https://cdn.us.document360.io/4662144b-ab1f-4796-8b7b-e9f9c609894f/Images/Documentation/clipboard_e3291b3bc5b36969946a63d41fb49eeb8.png?sv=2026-02-06&spr=https&st=2026-11-04T21%3A36%3A53Z&se=2026-11-04T22%3A36%3A53Z&sr=c&sp=r&sig=pgiMIvakFZWXvsPdwOKM1ErurPCP%2BCLeiPqp9FGXQ8E%3D)

> [!NOTE]
> Note:
> 
> If the Extend app was already in use, you may have completed the consent in the past. It’s good practice to verify this after any app update, as new permissions might require re-consent. Only custom/third-party apps require this admin consent step – Microsoft-built apps are pre-consented.

### 4. Limit Extend App to Specific Users or Groups

Using Teams’ **app-centric management** (the modern method to control app access), you can directly specify which users or groups can use the **Tango Extend** app. This replaces the older approach of using app permission policies. Follow the steps below to block the Extend app for everyone by default and then allow it only for designated users/groups in one streamlined action:

1. In the Teams Admin Center, go to **Teams apps** > **Manage apps**. Search for “**Extend**” and select the **Tango Extend** app to open its details page.
2. Click the **Users and groups** tab on the Extend app’s page.
3. Click the **Edit availability** button.
4. In the **Available to** dropdown, select **Specific users or groups**.
5. In the **Search for users or groups** field, add **each user or group** that should have access to the Extend app. (For example, you might add individual power users or a security group containing all approved Mobile Dialer users.)
6. After adding the desired entries, click **Apply** (or **Save**) to confirm the changes. The Extend app’s availability will now be set to “**Specific users or groups**,” with the list of allowed users/groups shown on the app’s detail page.

![clipboard_ee4ca2c95d4112e324b44a7b6fb9c33da.png](https://cdn.us.document360.io/4662144b-ab1f-4796-8b7b-e9f9c609894f/Images/Documentation/clipboard_ee4ca2c95d4112e324b44a7b6fb9c33da.png?sv=2026-02-06&spr=https&st=2026-11-04T21%3A36%3A53Z&se=2026-11-04T22%3A36%3A53Z&sr=c&sp=r&sig=pgiMIvakFZWXvsPdwOKM1ErurPCP%2BCLeiPqp9FGXQ8E%3D)

**Result:** Only the specified users or groups will be able to discover and use the **Tango Extend** app in Teams. All other users in the organization will **not** have access to the app (it will not appear for them in Teams). This ensures the mobile dialer service is restricted to the intended audience and not available tenant-wide.

![clipboard_e82caabfdd29344e67be21b84622fb38d.png](https://cdn.us.document360.io/4662144b-ab1f-4796-8b7b-e9f9c609894f/Images/Documentation/clipboard_e82caabfdd29344e67be21b84622fb38d.png?sv=2026-02-06&spr=https&st=2026-11-04T21%3A36%3A53Z&se=2026-11-04T22%3A36%3A53Z&sr=c&sp=r&sig=pgiMIvakFZWXvsPdwOKM1ErurPCP%2BCLeiPqp9FGXQ8E%3D)

Session Initiation Protocol, is the technology that starts, manages, and ends internet-based phone calls and video meetings between people and devices.

Direct Inward Dialing (DID) is a telecommunication service that allows a phone number to be assigned to a specific phone line within a private branch exchange (PBX), enabling direct calls to that line without going through a receptionist.

A service allowing customers to choose their telecom provider for making and receiving calls in Microsoft Teams.

Application Programming Interface, a set of protocols and tools that allows different software applications to communicate with each other.