#AvePoint Online Services December 2024

General Availability Date for the Commercial Environment: December 8, 2024

General Availability Date for the U.S. Government Environment: December 15, 2024

#General Updates

• The following new services are now deployed to the Japan West (Osaka) data center in AvePoint Online Services:

  • AvePoint Portal Manager

  • Document Management System Online

If you want to start a trial for a service, navigate to Home > Store, and click Start trial on the service tile.

• AvePoint cloud services no longer charge for licenses for the Google Workspace subscription – Cloud Identity SKUs.

• In Administration > Notification > Subscription notification, the previous term subscription extension has been updated to subscription updates. The content of the related notification email has also been updated accordingly.

• For tenants using the Fly service for Exchange On-Premises migrations, in Management > Service account > On-premises service account, the Exchange version list options have been updated for Giacom and SherWeb Exchange service providers.

• We updated third-party libraries to mitigate the CVE-2024-48510 vulnerability.

#What’s New in Tenant Management?

• Permissions of the following tenant registration apps have been updated:

  • The permissions for the Salesforce tenant registration app have been updated to the following: Access the identity URL service, Manage user data via APIs, and Perform requests at any time.

  • The permissions for the Microsoft tenant registration app have been updated. The previous permission, Directory.Read.All, has been replaced with the following permissions: Organization.Read.All, User.Read.All, Group.Read.All, and Domain.Read.All.

To reconnect to your tenant app with the latest permissions, go to Management > Tenant management and reconnect the tenant app.

• For Microsoft and Salesforce tenants, the Tenant details page now displays the Consenting user information.

#What’s New in App Management?

• For Microsoft 365 tenants, the Application ID information is now displayed on the App profile details page. Each app’s application ID is unique and can be used to search for the app in Microsoft Entra ID.

• If your Microsoft tenant wants to use the tyGraph service with a custom Azure app with delegated permissions, you can now configure a custom app with required permissions in Microsoft Entra ID, then navigate to AvePoint Online Services > Management > App management to configure the custom app profile.

• The Cloud Governance for Microsoft 365 service app now includes the Community.ReadWrite.All Microsoft Graph API application permission to support the provisioning of Viva Engage communities in dynamic service. If your organization has configured an app profile for this service app, navigate to AvePoint Online Services > Management > App management to re-authorize the app profile to add the new API permission.

• If your Salesforce tenant uses the Cloud Backup for Salesforce service, you can now configure a modern mode service app in AvePoint Online Services > Management > App management.

• If your Microsoft tenant uses the Cloud Backup for IaaS + PaaS service and has configured an app profile of the Cloud Backup for Azure type, you can now re-authorize the app profile to add the BitlockerKey.Read.All Microsoft Graph application permission.

#What’s New in Auto Discovery?

• In Auto discovery > Scan profiles, when configuring an advanced mode scan profile with the Specified objects in one container rule selected for containers, you can now set conditions to filter objects based on the following criteria:

  • For Security and distribution group objects, use the Cloud Governance metadata criterion if you choose to sync metadata as open extensions in your tenant’s Cloud Governance environment.

  • For SharePoint site or Microsoft 365 Group / Microsoft Team / Viva Engage community objects, use the Site status criterion to filter sites in the Active or Locked (Read-only) status.

  • For Microsoft 365 Group / Microsoft Team / Viva Engage community objects, use the Group / Team / Viva Engage community property > Sensitivity label criterion.

  • For Power App or Power Automate objects, use the Owner > Group membership criterion, and the Owner > Company/Department/Office criterion with the Is empty condition.

• The backend logic for scanning Google objects has been improved to first apply a custom Google app to run scan jobs. For Google tenants, configuring a custom Google app is the recommended choice to reduce the throttling issues.