GUI

1. Logon to admin.teams.microsoft.com
2. Go to Enhanced encryption policies
3. Click Add to create a new policy or edit the Global (Org-wide default)
4. On the setting End-to-end call encryption, select Users can turn it on

Powershell