Home > Appendices > Appendix F - Supported Variable Roles
Export to PDFAvePoint Cloud Governance supports setting variable roles when you select users in approval processes, site collection policies, services, renewal profiles, etc.
Note the following:
The following roles are available, but the roles vary when specifying roles in different fields.
| Role Name | Description |
|---|---|
| $Primary site collection contact | The primary site collection contact that is configured in AvePoint Cloud Governance. |
| $Manager of primary site collection contact | The manager of the primary site collection contact. The manager is configured in Microsoft Entra. |
| $Secondary site collection contact | The secondary site collection contact that is configured in AvePoint Cloud Governance. |
| $Manager of secondary site collection contact | The manager of the secondary site collection contact. The manager is configured in Microsoft Entra. |
| $Primary site collection administrator | The primary site collection administrator that is configured in AvePoint Cloud Governance or SharePoint. |
| $Additional site collection administrators | The users or groups within the SharePoint Site Collection Administrators group, except for the primary site collection administrator. |
| $New site collection contact | The user that takes over the role of site collection contact. |
| $Site collection owners group | The users or groups within the SharePoint Site Collection Owners group. |
| $Users with the Full Control permission | The users who have the Full Control permission to the site collection. |
| $Users with the Edit permission | The users who have the Edit permission to the site collection. |
| $Primary site contact | The primary site contact that is configured in AvePoint Cloud Governance. |
| $Secondary site contact | The secondary site contact that is configured in AvePoint Cloud Governance. |
| $Primary site contact of source | The primary site contact of the source node. |
| $Secondary site contact of source | The secondary site contact of the source node. |
| $Primary site contact of target | The primary site contact of the target node. |
| $Secondary site contact of target | The secondary site contact of the target node. |
| $New site contact | The user that takes over the role of site contact. |
| $Primary group/team/community/shared mailbox/resource mailbox/Power Platform object contact | The primary contact of a Microsoft 365 Group, Microsoft Team, Viva Engage community, shared mailbox, resource mailbox, Power App, Power Automate flow, Power BI workspace, or Power Platform environment; it is configured in AvePoint Cloud Governance. |
| $Manager of primary group contact | The manager of the primary group contact or primary team contact. The manager is configured in Microsoft Entra. |
| $Secondary group/team/community/shared mailbox/resource mailbox/Power Platform object contact | The secondary contact of a Microsoft 365 Group, Microsoft Team, or Viva Engage community, shared mailbox, resource mailbox, Power App, Power Automate flow, Power BI workspace, or Power Platform environment; it is configured in AvePoint Cloud Governance. |
| $Manager of secondary group contact | The manager of the secondary group contact or secondary team contact. The manager is configured in Microsoft Entra. |
| $New group/team/community contact | The user that takes over the role of the Microsoft 365 Group contact, Microsoft Team contact, or Viva Engage community contact. |
| $Group/Team/Power App/Power Automate flow owner or community admin | The owner of a Microsoft 365 Group/Microsoft Team/Power Automate flow, admin of a Viva Engage community, or owner and co-owner of a Power App; they are configured in Microsoft 365, Microsoft Teams, Viva Engage, or AvePoint Cloud Governance. |
| $Primary community contact | The primary contact of a Viva Engage community; it is configured in AvePoint Cloud Governance. |
| $Secondary community contact | The secondary contact of a Viva Engage community; it is configured in AvePoint Cloud Governance. |
| $Primary contact | The primary contact of an object; it is configured in AvePoint Cloud Governance. |
| $Secondary contact | The secondary contact of an object; it is configured in AvePoint Cloud Governance. |
| $Community admins | The administrator of a Viva Engage community; it is configured in Viva Engage or AvePoint Cloud Governance. |
| $Source user | The user from whom the permissions will be cloned or transferred. |
| $Manager of source user | The manager of the user from whom the permissions will be cloned or transferred. |
| $Target user | The user to whom the permissions will be cloned or transferred. |
| $Manager of target user | The manager of the user to whom the permissions will be cloned or transferred. |
| $Primary guest contact | The primary contact of a guest user; it is configured in AvePoint Cloud Governance. |
| $Secondary guest contact | The secondary contact of a guest user; it is configured in AvePoint Cloud Governance. |
| $Manager of task approver | The manager of the task approver. |
| $Manager of previous stage approver | The manager of the previous stage’s approver.This role is only available to the second or third stage of approval in an approval process. |
| $Requester | The user who submits a request. |
| $Manager of requester | The manager of the requester. The manager is configured in Microsoft Entra. |
| $Administrator contact | The administrator contact of a service. |
| $Service metadata ("Metadata name") | The Person or group/User Profile Property/Microsoft Entra property metadata that is added to the service with the approval process applied. Make sure the Allow a variable role reference to this metadata in the approval process option enabled on the metadata. The users or groups as the metadata value will be retrieved.Replace Metadata Name with the metadata name. |
| $Object metadata ("Metadata name") | The Person or group/Microsoft Entra property/Lookup metadata that is applied to the object. Make sure the Allow a variable role reference to this metadata in the approval process option is enabled on the metadata. The users or groups as the metadata value will be retrieved. |
| $New object metadata ("Metadata name") | The Person or group/Microsoft Entra property/Lookup metadata that is applied to the object. Make sure the Allow a variable role reference to this metadata in the approval process option is enabled on the metadata. The users or groups as the newly added/changed metadata value will be retrieved. |
| $Site collection metadata ("Metadata name") | The Person or group/User Profile Property/Microsoft Entra property metadata that is applied to the site collection. Make sure the Allow a variable role reference to this metadata in the approval process option is enabled on the metadata. The users or groups as the metadata value will be retrieved.Replace Metadata Name with the metadata name. |
| $Group/Team/Community metadata ("Metadata name") | The Person or group/User Profile Property/Microsoft Entra property metadata that is applied to the group, team, or community. Make sure the Allow a variable role reference to this metadata in the approval process option is enabled on the metadata. The users or groups as the metadata value will be retrieved.Replace Metadata Name with the metadata name. |
| $SharePoint Online Group ("$SiteName Group Name Suffix") | The custom SharePoint Online group. For site-specific groups, use the following format: $SiteName Group Name Suffix. Replace Group Name Suffix with your desired value (i.e. Owners). SiteName will be automatically replaced with the appropriate site title. |
| $Guest inviter | The user who invited the guest user to the tenant. |
| $Task assignee | The users who are specified as the assignees to complete the task. |
| $Task approver | The user who has approved/rejected the task. |
| $Site property ("Property name") | The property value of a site, and it’s specified in AvePoint Cloud Governance or ServiceNow. Replace the Property name with the property name in your site property bag. |
| $Private channel owner | The owner of a private channel. It is configured in AvePoint Cloud Governance. |
| $Shared channel owner | The owner of a shared channel. It is configured in AvePoint Cloud Governance. |
| $Team owner | The owner of a Microsoft Team. |
| $Team contact | The contact of a Microsoft Team. |
| $Group owner | The owner of a distribution group, security group, or mail-enabled security group. |
| $Shared mailbox member | The members of a shared mailbox. |
| $Manager of primary contact | The manager of a site collection, Microsoft 365 Group, Microsoft Team, Viva Engage community’s primary contact. This role is only available in the modern Cloud Governance admin center. |
| $Manager of secondary contact | The manager of a site collection, Microsoft 365 Group, Microsoft Team, Viva Engage community’s secondary contact. This role is only available in the modern Cloud Governance admin center. |
| $Power App co-owner | The co-owner of a Power App. |
| $Power App owner | The owner of a Power App. |
| $Power BI workspace member | The member of a Power BI workspace. |
| $Environment contact | The primary/secondary contact of the environment that Power Automate flow or Power App belongs to. |
| $Environment admin of Power Automate flow or Power App | The environment admin of a Power Automate flow or Power App. |
| $Object creator | The creator of a Microsoft 365 Group, team, Power App, Power Automate flow, or Power Platform environment. |
| $Manage of object creator | The manager of the role $Object creator when the object admin is a user. |
| $Object admin | The team owner, group owner, community admin, site administrator, Power App owner, Power Automate flow owner, Power BI workspace admin, environment admin, or environment system administrator. |
| $Manager of object admin | The manager of the role $Object admin when the object admin is a user. |
| $Manager of original active contact | The manager of the primary or secondary contact who is no longer active. |