English

Home > Manage Dynamic Services > Settings > Configure Provisioning Services

Configure Provisioning Services

This section details services that define how new workspaces, such as Teams, Groups, and SharePoint sites, are created with consistent governance settings and structured ownership.

After you add an element to a dynamic service, you must complete the corresponding configurations. For more details on how to configure each type of element, refer to the instructions in the corresponding section below:

Create Confide Project

A Create Confide project service allows you to define the Confide project provisioning service request template for your business users. You can customize the settings for Confide projects created by the service request as well as configure available options for your business users to choose from when they request this service.

NOTE

This service is only displayed if you have an available subscription for Confide with SharePoint Embedded.

The following settings are the default settings of a Create Confide project service, and they are required to be configured:

Tenant – The Microsoft 365 tenant that your organization configured in Confide is displayed. New Confide projects created via the service request will reside in this tenant.
Project name & description – Specify a description for the new Confide projects created via the service request or allow your business users to configure this in the request form.
- Project name – The project name will be specified by your business user in the request form.
- Project description – Enter a default description for the project.
  
  Choose one of the following options from the drop-down list to determine how to set the project description:
  - Allow business users to configure this field – You can enter a project description. Business users can edit the project description in the request form.
  - Require business users to configure this field – Business users are required to configure the project description in the request form.
  - Show this field as read-only to business users – The project description will be displayed to business users as read-only.
  - Hide this field from business users – The project description will not be displayed to business users.
Sensitivity label – Select a sensitivity label for new Confide projects created by this service. If you select multiple sensitivity labels, select a default one from the Default sensitivity label drop-down list.

Choose one of the following options from the drop-down list to determine how to set the sensitivity label:
- Require business users to configure this field – Business users are required to select a sensitivity label in the request form from what you’ve selected in this service.
- Show this field as read-only to business users – The default sensitivity label will be applied to new projects, and it will be displayed to business users as read-only.
- Hide this field from business users – The default sensitivity label will be applied to new projects, and it will not be displayed to business users.
Project contact – Select the primary contact and/or secondary contact for the new Confide projects created via the service request.
- Primary contact – The primary contact will be responsible for managing the new Confide projects.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
    
    Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary project contact in the request form.
    - Show this field as read-only to business users – You select the primary project contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary project contact and they will not be displayed to business users.
    Choose whether to Notify the contact when Confide project provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new Confide projects when the primary contact is unavailable.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
    
    Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Allow business users to configure this field – Business users can select the secondary project contact in the request form.
    - Require business users to configure this field – Business users are required to select the secondary project contact in the request form.
    - Show this field as read-only to business users – You select the secondary project contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary project contact and they will not be displayed to business users.
    Choose whether to Notify the contact when Confide project provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
Business owner – Business users are required to select the business owner for new Confide projects in the request form.
Project template – Select a project template for new Confide projects created by this service. If you select multiple project templates, select a default one from the Default template drop-down list. You can also select None if you allow your business users to not select any project template in the service request form to apply to the project.

NOTE
The project templates are retrieved from Confide. Make sure that your tenant has available project templates in Confide to use.

Choose one of the following options from the drop-down list to determine how to set the project template:
- Allow business users to configure this field – Business users are allowed to select a project template in the request form from what you’ve selected in the service.
- Require business users to configure this field – Business users are required to select a project template in the request form from what you’ve selected in this service.
- Show this field as read-only to business users – The default project template will be applied to new projects, and it will be displayed to business users as read-only.
- Hide this field from business users – The default project template will be applied to new projects, and it will not be displayed to business users.
Industry – Select an industry for new Confide projects created by this service. If you select multiple industries, select a default one from the Default industry drop-down list. You can also select None if you allow your business users to not select any industry in the service request form to apply to the project.

NOTE
The industries are retrieved from Confide. Make sure that your tenant has available industries in Confide to use.

Choose one of the following options from the drop-down list to determine how to set the industry:
- Allow business users to configure this field – Business users are allowed to select an industry in the request form from what you’ve selected in the service.
- Require business users to configure this field – Business users are required to select an industry in the request form from what you’ve selected in this service.
- Show this field as read-only to business users – The default industry will be applied to new projects, and it will be displayed to business users as read-only.
- Hide this field from business users – The default industry will be applied to new projects, and it will not be displayed to business users.
Custom project properties – Specify custom project properties that will be available in the service requests. Business users will specify values for the listed properties in the request form.

NOTE
This setting is required when your tenant has required custom project properties in Confide. Otherwise, you can optionally configure this setting based on your requirements.

Required project properties are listed on the table by default. To add an additional property, click Add. Select the project properties you want to add to this service request and click Add in the Custom project properties panel. The selected properties will be added to the table.

You can click the Delete button to delete an optional property from the table.

Apart from the default settings, you can click the add button to add any of the following settings to a Create Confide project service based on your requirement, and then complete the configurations:

Auto-lock/Retention policy/Target close date – Configure the auto-lock and retention settings for new Confide projects create via the service request or allow your business users to configure the settings in the request form.
- Auto-lock the project when the target close date passes – Select Yes or No to enable or disable auto-lock for the new projects. If Yes is selected, specify the target close date below. The project will be automatically locked once the target close date has passed. Users (including administrators) will only be able to retain the View permission.
  
  Choose one of the following options from the drop-down list to determine how to set the auto-lock setting:
  - Require business users to configure this field – Business users are required to choose the auto-lock setting in the request form.
  - Show this field as read-only to business users – You choose to enable or disable the auto-lock setting for new projects, and it will be displayed to business users as read-only.
  - Hide this field from business users – You choose to enable or disable the auto-lock setting for new projects, and it will not be displayed to business users.
- Retention policy - Choose to allow users to manually delete projects or automatically delete projects after a retention period:
  - Delete projects manually without retention – Do not apply the retention policy and users can manually delete the project.
  - Retain projects for a period before auto deletion – With this option selected, enter a number and select Months or Years as the unit of time to define the period. Then, specify the target close date below. The project will be deleted automatically once the retention period ends after the target close date.
  Choose one of the following options from the drop-down list to determine how to set the retention policy:
  - Require business users to configure this field – Business users are required to configure the retention policy in the request form.
  - Show this field as read-only to business users – You configure the retention policy for new projects, and it will be displayed to business users as read-only.
  - Hide this field from business users – You configure the retention policy for new projects, and it will not be displayed to business users.
Block bulk download for users – Select Yes or No to block or allow bulk download for users for new Confide projects created via the service request.

Choose one of the following options from the drop-down list to determine how to set this setting:
- Require business users to configure this field – Business users are required to configure this setting in the request form.
- Show this field as read-only to business users – You configure this setting for new projects, and it will be displayed to business users as read-only.
- Hide this field from business users – You configure this setting for new projects, and it will not be displayed to business users.
- Project renewal – Use a project renewal profile to determine the renewal schedule and governance details that must be confirmed when a Confide project goes through the renewal process.
  
  Select a Confide project renewal profile for new projects. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also select None if you allow your business users to not select any renewal profile in the service request form to apply to the project.
  
  You can click Create to configure a new project renewal profile in the Create Confide project renewal profile panel. For detailed instructions, refer to Configure Confide Project Renewal Profiles.
  
  Choose one of the following options from the drop-down list to determine how to set the project renewal process:
  - Require business users to configure this field – Business users are required to select a project renewal profile in the request form from what you’ve selected in the service.
  - Show this field as read-only to business users – You select the project renewal profile here and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the project renewal profile here and it will not be displayed to business users.
Task encryption – Select Yes or No to enable or disable task encryption for new Confide projects created via the service request.

Choose one of the following options from the drop-down list to determine how to set this setting:
- Require business users to configure this field – Business users are required to configure this setting in the request form.
- Show this field as read-only to business users – You configure this setting for new projects, and it will be displayed to business users as read-only.
- Hide this field from business users – You configure this setting for new projects, and it will not be displayed to business users.

Create Distribution Group Service

A Create distribution group service allows you to define the distribution group provisioning service request template for your business users. You can customize the settings for distribution groups created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create distribution group service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New distribution groups created via the service request will reside in the chosen tenant.

To select your tenant here, make sure an app profile for Cloud Governance for Exchange service app has been created in AvePoint Online Services. If your tenant uses the custom app, make sure you add the Exchange.ManageAsApp permission to the custom Azure app, assign the Exchange Administrator role to the app, and re-authorize the app.
Distribution group name & description – Choose to let your business users manually enter group names in the request form, or you set construction rules for the group names, and decide whether requesters can use a group name that is already in use.
- Construct group name – If you leave the checkbox deselected, business users can specify group names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the group name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for group names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build group names. This field will be displayed to business users as read-only.
- Do not allow duplicate group names– With the checkbox selected, business users who submit the request via this service will not be allowed to create a group with a name that is already in use.
- Group description – Enter a description for the group.
  
  Choose one of the following options from the drop-down list to determine how to set the group description:
  - Allow business users to configure this field – You can enter a group description. Business users can edit the group description in the request form.
  - Require business users to configure this field – Business users are required to configure the group description in the request form.
  - Show this field as read-only to business users – The group description will be displayed to business users as read-only.
  - Hide this field from business users – The group description will not be displayed to business users.
Group email address – Choose to let your business users manually enter the group email address in the request form, or you set construction rules for the group email address.
- Scope – Select the domain scope for the group email address. Then, select a domain from the drop-down list as the Default domain.
  
  Choose one of the following options from the drop-down list to determine how to set the group email address domain scope:
  - Require business users to configure this field – This setting is required to be configured in a request form. The domain scope you set here will be displayed to business users as available options.
  - Show this field as read-only to business users – The domain scope you set here will be displayed to business users as read-only.
  - Hide this field from business users – The domain scope will not be displayed to business users.
- Construct email address – If you leave the checkbox deselected, business users can specify group email address in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the group email address, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the group email address:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build the group email address.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for group email addresses.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build the group email address. This field will be displayed to business users as read-only.
Distribution group contact – Select the primary contact and/or secondary contact for the new distribution groups created via the service request.
- Primary contact – The primary contact will be responsible for managing the new distribution groups.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
  - Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary group contact in the request form.
    - Show this field as read-only to business users – You select the primary group contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary group contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when group provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new distribution groups when the primary contact is unavailable.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
  - Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Require business users to configure this field – Business users are required to select the secondary group contact in the request form.
    - Show this field as read-only to business users – You select the secondary group contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary group contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when group provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
Owners – Add one or more Microsoft 365 users or mail-enabled security groups as the owners of the new distribution groups created via the service request. Note that only Microsoft 365 users who have mailboxes are allowed to be specified as group owners.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as distribution group owners in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Group owners – Enter the names of users or mail-enabled security groups as the distribution group owners, or enter $ to select from available roles, and the user who takes the role will be the group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Require business users to configure this field – Business users are required to select the group owners in the request form.
  - Show this field as read-only to business users – You select the group owners, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the group owners, and they will not be displayed to business users.
- Predefined group owners – Predefined group owners that you selected here will be the default group owners. Enter the names of users as the predefined group owners, or enter $ to select from available roles, and the user who takes the role will be the predefined group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Show this field as read-only to business users – The predefined group owners will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group owners will not be displayed to business users.

Apart from the default settings, you can click the add button to add any of the following settings to a Create distribution group service based on your requirement, and then complete the configurations:

Delivery management – By default, only people in your organization can send messages to this group. You can also configure whether to allow people outside of your organization to send messages to this group or specify who can send messages to the group. Specified senders must be internal users with mailboxes, distribution groups, or mail-enabled security groups.
- Sender options – Configure whether to allow the people outside your organization to send messages to this group by selecting one of the following options:
  - Only allow messages from people inside my organization
  - Allow messages from people inside and outside my organization
  Choose one of the following options from the drop-down list to determine how to set the sender options:
  - Require business users to configure this field – Business users are required to set the sender options.
  - Show this field as read-only to business users – You set the sender options and they will be displayed to business users as read-only.
  - Hide this field from business users – You set the sender options and they will not be displayed to business users.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles.
- Specified senders – Enter the names of users, distribution groups, or mail-enabled security groups as the specified senders. Choose one of the following options from the drop-down list to determine how to set the specified senders:
  - Allow business users to configure this field – You can specify the senders. Business users can choose whether to edit or assign the senders in the request form.
  - Require business users to configure this field – Business users are required to specify the senders in the request form.
  - Show this field as read-only to business users – You specify the senders and they will be displayed to business users as read-only.
  - Hide this field from business users – You specify the senders and they will not be displayed to business users.
- Predefined specified senders - Predefined specified senders that you selected here will be the default senders. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined specified senders. Choose one of the following options from the drop-down list to determine how to set the predefined specified senders:
  - Show this field as read-only to business users – The predefined specified senders will be displayed to business users as read-only.
  - Hide this field from business users – The predefined specified senders will not be displayed to business users.
Distribution group contact election – Use the group contact election profile to automate the distribution group contact election process, which will be triggered to determine the proper contacts when the primary or secondary group contact is deactivated.

Select a group contact election profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new group contact election profile in the Create Microsoft Entra group contact election profile panel. For detailed instructions, refer to Configure Microsoft Entra Group Contact Election Profiles.

Choose one of the following options from the drop-down list to determine how to set the group contact election process:
- Require business users to configure this field – Business users are required to select a group contact election profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the group contact election profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group contact election profile here and it will not be displayed to business users.
Distribution group renewal – Use a group renewal profile to determine the renewal schedule and governance details that must be confirmed when a distribution group goes through the renewal process.

Select a group renewal profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new group renewal profile in the Create Microsoft Entra group renewal profile panel. For detailed instructions, refer to Configure Microsoft Entra Group Renewal Profiles.

Choose one of the following options from the drop-down list to determine how to set the site collection renewal process:
- Require business users to configure this field – Business users are required to select a group renewal profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the group renewal profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group renewal profile here and it will not be displayed to business users.
Exchange global address list – Choose whether to hide new distribution groups created via the service request from the Exchange global address list by selecting Yes or No.

Choose one of the following options from the drop-down list to determine how to set the Exchange global address list setting:
- Allow business users to configure this field – Business users can choose whether to hide new groups created via the service request from the Exchange global address list.
- Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
- Hide this field from business users – Your configuration here will not be displayed to business users.
Members – Add users, groups (distribution groups, mail-enabled security groups, or security groups) as members for new distribution groups created via the service request.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as distribution group members in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Group members – Enter the names of users or groups as the distribution group members, or enter $ to select from available roles, and the user who takes the role will be the group member. Choose one of the following options from the drop-down list to determine how to set the group members:
  - Allow business users to configure this field – You can select the group members. Business users can choose whether to edit or assign the group members in the request form.
  - Require business users to configure this field – Business users are required to select the group members in the request form.
  - Show this field as read-only to business users – You select the group members and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the group members and they will not be displayed to business users.
- Predefined group members – Predefined group members that you selected here will be the default group members. Enter the names of users or groups as the predefined group members, or enter $ to select from available roles, and the user who takes the role will be the predefined group member.
  
  Choose one of the following options from the drop-down list to determine how to set the group members:
  - Show this field as read-only to business users – The predefined group members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group members will not be displayed to business users.
Membership approval – Specify if group owner approval is needed for users to join or leave this group:
- Joining the group – Choose one of the following options:
  - Open - Anyone can join this group without owner approval.
  - Closed - Only group owners can add members. All requests to join will be automatically declined.
  - Owner approval - Anyone can request to join this group and owners must approve the request.
- Leaving the group – Choose one of the following options:
  - Open - Anyone can leave this group without owner approval.
  - Closed - Only group owners can remove members. All requests to leave will be automatically declined.
Message approval – Add moderators to approve or reject messages sent to the group. Choose if the senders will be notified if their message isn't approved.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as group moderators in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Group moderators – Enter the names of users as the group moderators, or enter $ to select from available roles, and the user who takes the role will be the group moderator. Choose one of the following options from the drop-down list to determine how to set the group moderators:
  - Allow business users to configure this field – You can select the group moderators. Business users can choose whether to edit or assign the group moderators in the request form.
  - Require business users to configure this field – Business users are required to select the group moderators in the request form.
  - Show this field as read-only to business users – You select the group moderators and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the group moderators and they will not be displayed to business users.
- Predefined group moderators – Predefined group moderators that you selected here will be the default group moderators. Enter the names of users as the predefined group moderators, or enter $ to select from available roles, and the user who takes the role will be the predefined group moderator. Choose one of the following options from the drop-down list to determine how to set the group moderators:
  - Show this field as read-only to business users – The predefined group moderators will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group owners will not be displayed to business users.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as senders who don't require message approval in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Senders who don't require message approval – Enter the names of users or groups (Microsoft 365 Groups, distribution groups, or mail-enabled security groups) as the senders, or enter $ to select from available roles, and the user who takes the role will be the sender who doesn’t require message approval. Choose one of the following options from the drop-down list to determine how to set the senders:
  - Allow business users to configure this field – You can select the group moderators. Business users can choose whether to edit or assign the senders in the request form.
  - Require business users to configure this field – Business users are required to select the senders in the request form.
  - Show this field as read-only to business users – You select the senders and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the senders and they will not be displayed to business users.
- Predefined senders who don't require message approval – Predefined senders that you selected here will be the default senders who don't require message approval. Enter the names of users or groups (Microsoft 365 Groups, distribution groups, or mail-enabled security groups) as the predefined senders, or enter $ to select from available roles, and the user who takes the role will be the predefined sender. Choose one of the following options from the drop-down list to determine how to set the senders:
  - Show this field as read-only to business users – The predefined senders will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group senders will not be displayed to business users.
- Notify a sender if their message isn't approved – Choose one of the following options:
  - Only sender
  - Only senders in your organization
  - No notification
Send as – Add the delegates (users and mail-enabled security groups) who will have the Send as permission to send emails from the group. From the recipient's perspective, the emails were sent by the group.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send as permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send as – Enter the names of users or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send as permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send as permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send as – Predefined delegates that you selected here will be the default delegates with the Send as permission. Enter the names of users or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
Send on behalf – Add the delegates (users, distribution groups, and mail-enabled security groups) who will have the Send on behalf permission to send emails on behalf of the group.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send on behalf permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send on behalf – Enter the names of users, distribution groups, or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send on behalf permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send on behalf permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send on behalf – Predefined delegates that you selected here will be the default delegates with the Send on behalf permission. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.

Create Mail-enabled Security Group Service

A Create mail-enabled security group service allows you to define the mail-enabled security group provisioning service request template for your business users. You can customize the settings for mail-enabled security groups created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create mail-enabled security group service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New mail-enabled security groups created via the service request will reside in the chosen tenant.

To select your tenant here, make sure an app profile for Cloud Governance for Exchange service app has been created in AvePoint Online Services. If your tenant uses the custom app, make sure you add the Exchange.ManageAsApp permission to the custom Azure app, assign the Exchange Administrator role to the app, and re-authorize the app.
Mail-enabled security group name & description – Choose to let your business users manually enter group names in the request form, or you set construction rules for the group names, and decide whether requesters can use a group name that is already in use.
- Construct group name – If you leave the checkbox deselected, business users can specify group names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the group name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the group name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build group names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for group names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build group names. This field will be displayed to business users as read-only.
- Do not allow duplicate group names – With the checkbox selected, business users who submit the request via this service will not be allowed to create a group with a name that is already in use.
- Group description – Enter a description for the group.
  
  Choose one of the following options from the drop-down list to determine how to set the group description:
  - Allow business users to configure this field – You can enter a group description. Business users can edit the group description in the request form.
  - Require business users to configure this field – Business users are required to configure the group description in the request form.
  - Show this field as read-only to business users – The group description will be displayed to business users as read-only.
  - Hide this field from business users – The group description will not be displayed to business users.
Group email address – Choose to let your business users manually enter group email address in the request form, or you can set construction rules for the group email address.
- Scope – Select the domain scope for the group email address. Then, select a domain from the drop-down list as the Default domain.
  
  Choose one of the following options from the drop-down list to determine how to set the group email address:
  - Require business users to configure this field – This setting is required to be configured in a request form. The domain scope you set here will be displayed to business users as available options.
  - Show this field as read-only to business users – The domain scope you set here will be displayed to business users as read-only.
  - Hide this field from business users – The domain scope will not be displayed to business users.
- Construct email address – If you leave the checkbox deselected, business users can specify group email address in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the group email address, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the group email address:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build the group email address.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for group email address.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build the group email address. This field will be displayed to business users as read-only.
Mail-enabled security group contact – Select the primary contact and/or secondary contact for the new mail-enabled security groups created via the service request.
- Primary contact – The primary contact will be responsible for managing the new mail-enabled security groups.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
  - Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary group contact in the request form.
    - Show this field as read-only to business users – You select the primary group contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary group contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when group provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new mail-enabled security groups when the primary contact is unavailable.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
  - Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Require business users to configure this field – Business users are required to select the secondary group contact in the request form.
    - Show this field as read-only to business users – You select the secondary group contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary group contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when group provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
Owners – Add one or more Microsoft 365 users or mail-enabled security groups as the owners of the new groups created via the service request. Note that only Microsoft 365 users who have mailboxes are allowed to be specified as group owners.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as mail-enabled security group owners in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Group owners – Enter the names of users as the mail-enabled security group owners, or enter $ to select from available roles, and the user who takes the role will be the group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Require business users to configure this field – Business users are required to select the group owners in the request form.
  - Show this field as read-only to business users – You select the group owners, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the group owners, and they will not be displayed to business users.
- Predefined group owners – Predefined group owners that you selected here will be the default group owners. Enter the names of users as the predefined group owners, or enter $ to select from available roles, and the user who takes the role will be the predefined group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Show this field as read-only to business users – The predefined group owners will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group owners will not be displayed to business users.

Apart from the default settings, you can click the add button to add any of the following settings to a Create mail-enabled security group service based on your requirement, and then complete the configurations:

Communication – Choose whether to allow people outside of your organization to send emails to this group by selecting Yes or No.
Email delivery reports – Choose to send the email delivery reports to the senders who send messages to the mail-enabled security group or send the reports to the group owners. Note that you can only enable one option.
Exchange global address list – Choose whether to hide new mail-enabled security groups created via the service request from the Exchange global address list by selecting Yes or No.

Choose one of the following options from the drop-down list to determine how to set the Exchange global address list setting:
- Allow business users to configure this field – Business users can choose whether to hide new groups created via the service request from the Exchange global address list.
- Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
- Hide this field from business users – Your configuration here will not be displayed to business users.
Mail-enabled security group contact election – Use the group contact election profile to automate the mail-enabled security group contact election process, which will be triggered to determine the proper contacts when the primary or secondary group contact is deactivated.

Select a group contact election profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new group contact election profile in the Create Microsoft Entra group contact election profile panel. For detailed instructions, refer to Configure Microsoft Entra Group Contact Election Profiles.

Choose one of the following options from the drop-down list to determine how to set the group contact election process:
- Require business users to configure this field – Business users are required to select a group contact election profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the group contact election profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group contact election profile here and it will not be displayed to business users.
Mail-enabled security group renewal – Use a group renewal profile to determine the renewal schedule and governance details that must be confirmed when a mail-enabled security group goes through the renewal process.

Select a group renewal profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new group renewal profile in the Create Microsoft Entra group renewal profile panel. For detailed instructions, refer to Configure Microsoft Entra Group Renewal Profiles.

Choose one of the following options from the drop-down list to determine how to set the site collection renewal process:
- Require business users to configure this field – Business users are required to select a group renewal profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the group renewal profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group renewal profile here and it will not be displayed to business users.
Members – Add users, groups (Microsoft 365 Groups, distribution groups, mail-enabled security groups, or security groups) as members for new mail-enabled security groups created via the service request. Note that if you specify a group, the members of the group will be added but not the group itself.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as mail-enabled security group members in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Group members – Enter the names of users or groups as the mail-enabled security group members, or enter $ to select from available roles, and the user who takes the role will be the group member. Choose one of the following options from the drop-down list to determine how to set the group members:
  - Allow business users to configure this field – You can select the group members. Business users can choose whether to edit or assign the group members in the request form.
  - Require business users to configure this field – Business users are required to select the group members in the request form.
  - Show this field as read-only to business users – You select the group members and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the group members and they will not be displayed to business users.
- Predefined group members – Predefined group members that you selected here will be the default group members. Enter the names of users as the predefined group members, or enter $ to select from available roles, and the user who takes the role will be the predefined group member.
  
  Choose one of the following options from the drop-down list to determine how to set the group members:
  - Show this field as read-only to business users – The predefined group members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group members will not be displayed to business users.
Membership approval – Specify if group owner’s approval is required to join the group by selecting from Yes or No.

Create Microsoft 365 Group Service

A Create Microsoft 365 Group service allows you to define the Microsoft 365 Group provisioning service request template for your business users. You can customize the settings for Microsoft Groups created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create Microsoft 365 Group service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New groups created via the service request will reside in the chosen tenant.
Multi-Geo locations – This section appears only when your Microsoft 365 tenant has the Multi-Geo Capabilities in Microsoft 365 service plan. By default, new Microsoft 365 Groups will be created in your tenant’s central location. The central location is the geo location where your tenant was originally provisioned.

To enable group provisioning in multi-geo locations, choose one of the following options and configure the corresponding settings:
- Select specific geo locations – If you allow group data to be stored in different geo locations, select geo locations to set the scope, and your business users will choose geo locations from the scope.
  
  Click Add to open the Region panel, select one or more geo locations in the panel, and then click Add to add them to the table.
  
  If you add more than one geo location, select a default location from the Default geo location drop-down list.
  
  Choose one of the following options to determine how to set the geo locations:
  - Require business users to configure this field – Business users are required to select the geo location in the request form.
  - Show this field as read-only to business users – You select the geo location and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the geo location and it will not be displayed to business users.
- Use the preferred data location of the selected user role to determine the geo location – If you do not allow your business users to choose geo locations, you can choose to retrieve the preferred data location (PDL) of the requester or primary group contact as the geo location. Select the $Requester or $Primary contact role from the drop-down list.
  
  NOTE
  If the requester or primary group contact does not have the PDL property, the Microsoft 365 Group will be created in your tenant’s central location.
Group name & description – Choose to let your business users manually enter group names in the request form, or you set construction rules for the group names, and decide whether requesters can use a group name that is already in use.
- Construct group name – If you leave the checkbox deselected, business users can specify group names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the group name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or group, Managed metadata, Lookup, or Microsoft Entra property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the group name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build group names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for group names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build group names. This field will be displayed to business users as read-only.
- Do not allow duplicate group names – With the checkbox selected, business users who submit the request via this service will not be allowed to create a group with a name that is already in use.
- Group description – Enter a description for the group.
  
  Choose one of the following options from the drop-down list to determine how to set the group description:
  - Allow business users to configure this field – You can enter a group description. Business users can edit the group description in the request form.
  - Require business users to configure this field – Business users are required to configure the group description in the request form.
  - Show this field as read-only to business users – The group description will be displayed to business users as read-only.
  - Hide this field from business users – The group description will not be displayed to business users.
Privacy – Configure the privacy settings for new groups created via the service request. Choose one of the following privacy settings:
- Public – Anyone can see group content
- Private – Only members can see group content
Choose one of the following options from the drop-down list to determine how to set the privacy settings:
- Require business users to configure this field – Business users are required to configure the privacy settings in the request form.
- Show this field as read-only to business users – The privacy settings configured here will be applied to groups created via this service. This field will be displayed to business users as read-only.
- Hide this field from business users – The privacy settings configured here will be applied to groups created via this service. This field will not be displayed to business users.
Classification – Select one or more classifications that you wish to apply to new groups created via the service request. If you select more than one classification, select a default classification from the Default classification drop-down list.

Choose one of the following options from the drop-down list to determine how to set the classification:
- Require business users to configure this field – Business users are required to select a classification in the request form from what you’ve selected in this service.
- Show this field as read-only to business users – The default classification will be applied to new groups, and it will be displayed to business users as read-only.
- Hide this field from business users – The default classification will be applied to new groups, and it will not be displayed to business users.
Note the following:
- Once the integration with sensitivity labels is enabled in your tenant, the Classification section will be hidden and no longer require configuration.
- Group classifications can be created in the Cloud Governance admin center > System settings > Group/Team advanced settings. You can refer to the instructions in the Configure Group/Team Advanced Settings section. You can also create group classifications by using Microsoft PowerShell. For more details, refer to the Microsoft article: Create classifications for Microsoft 365 Groups in your organization.
Sensitivity label – Select a sensitivity label for new groups created by this service. If you select multiple sensitivity labels, select a default one from the Default sensitivity label drop-down list. You can also select None if you allow your business users to not select any sensitivity label in the service request form to apply to the team.
NOTE
- This section only appears when the sensitivity is enabled for your tenant in Settings > System settings > Sensitivity labels in the Cloud Governance admin center. For more instructions, refer to Enable Integration with Sensitivity Labels.
- Make sure that your tenant has already created and published the sensitivity labels in Microsoft 365. To allow Cloud Governance to retrieve external user access and external sharing settings of labels, configure the Cloud Governance for Exchange app and assign it the Compliance Administrator role. Without the configurations, an error task will be generated when configurations in the service requests conflict with the applied sensitivity label settings.
Choose one of the following options from the drop-down list to determine how to set the sensitivity label:
- Require business users to configure this field – Business users are required to select a sensitivity label in the request form from what you’ve selected in this service.
- Show this field as read-only to business users – The default sensitivity label will be applied to new groups, and it will be displayed to business users as read-only.
- Hide this field from business users – The default sensitivity label will be applied to new groups, and it will not be displayed to business users.
Group contact – Select the primary contact and/or secondary contact for the new groups created via the service request.
- Primary contact – The primary contact will be responsible for managing the new groups.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
  - Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary group contact in the request form.
    - Show this field as read-only to business users – You select the primary group contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary group contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when group provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new groups when the primary contact is unavailable. You can also click the refresh button to retrieve the latest available profiles.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
  - Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Allow business users to configure this field – You can select the secondary group contact. Business users can choose whether to edit, remove, or assign the secondary group contact in the request form.
    - Require business users to configure this field – Business users are required to select the secondary group contact in the request form.
    - Show this field as read-only to business users – You select the secondary group contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary group contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when group provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
Group owners – Add one or more Microsoft 365 users as the owners of the new groups created via the service request.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as group owners in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Group owners – Enter the names of users as the group owners, or enter $ to select from available roles, and the user who takes the role will be the group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Require business users to configure this field – Business users are required to select the group owners in the request form.
  - Show this field as read-only to business users – You select the group owners, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the group owners, and they will not be displayed to business users.
- Predefined group owners – Predefined group owners that you selected here will be the default group owners. Enter the names of users as the predefined group owners, or enter $ to select from available roles, and the user who takes the role will be the predefined group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Show this field as read-only to business users – The predefined group owners will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group owners will not be displayed to business users.
Show links in the request and task details page – Choose whether to display links of Conversations, Planner, Site, Files, Notebook and/or Teams that will be created together with new groups.

NOTE
If a Convert Microsoft 365 Group to team service scope is inherited from a previous Create Microsoft 365 Group service, you can choose whether to display the Microsoft Team link on the request or task details page.

Group ID – Set the domain scope for the group IDs and choose to let your business users manually enter the group ID in the request form, or you set construction rules for the group IDs.

Set domain scope – If you leave this checkbox deselected, the group ID will follow the default domain of the tenant. With this checkbox selected, you can select the following methods to set the domain scope:

To make this setting available, make sure an app profile for Cloud Governance for Exchange service app has been created in AvePoint Online Services. If your tenant uses the custom app, make sure you add the Exchange.ManageAsApp permission to the custom Azure app, assign the Exchange Administrator role to the app, and re-authorize the app.
- Select specific domains – Select the domain scope for the group IDs. Then, select a domain from the drop-down list as the Default domain.
  
  Choose one of the following options from the drop-down list to determine how to set the group ID domain scope:
  - Require business users to configure this field – This setting is required to be configured in a request form. The domain scope you set here will be displayed to business users as available options.
  - Show this field as read-only to business users – The domain scope you set here will be displayed to business users as read-only.
  - Hide this field from business users – The domain scope will not be displayed to business users.
- Use the preferred domain of therequester to determine thegroup domain – If you do not allow your business users to choose the domain, you can choose to retrieve The domain set in the requester's username or The domain set in the requester’s primary email address as the group domain.

Construct group ID – If you leave the Construct group ID checkbox deselected, business users can specify group IDs in the request form. With the Construct group ID checkbox selected, click Add for the prefix and/or suffix of the group ID, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.

NOTE

The metadata with the type of Single line of text, Choice, Person or group, Managed metadata, Lookup, or Microsoft Entra property can be used to set the rule.

Sequence Number	Note
{01}	The sequence number at the end of the group ID will increase from 01 to 99 in numerical value.
{01*}	The sequence number at the end of the group ID will increase from 01 to 999999999 in numerical value.

Choose one of the following options from the drop-down list to determine how to set the group ID:

Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build group IDs.
Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for group IDs.
Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build group IDs. This field will be displayed to business users as read-only.

Apart from the default settings, you can click the add button to add any of the following settings to a Create Microsoft 365 Group service based on your requirement, and then complete the configurations:

Administrative unit – If you are using a custom app profile and do not want to add the Group.ReadWrite.All permission to the custom app, this setting provides an alternative way to create Microsoft 365 Groups. Select an administrative unit from the drop-down list.

To leverage this setting to create groups, the following operations are required:
1. Make sure a custom app in AvePoint Online Services with the following API permissions has been created for your tenant.
  
  Microsoft Graph API:
  - Group.Create
  - Directory.Read.All
  - Team.Create
  - TeamSettings.ReadWrite.All
  - Sites.Read.All
  SharePoint API:
  - Site.FullControl.All
2. Configure the administrative unit that you want to use for group creation in Microsoft Entra. Refer to Create or delete administrative units for instructions.
3. Assign the following roles with administrative unit scope to your custom app. Refer to Assign roles with administrative unit scope for instructions.
  - Privileged Role Administrator
  - Global Administrator
  - Groups Administrator
Exchange global address list – Choose whether to hide new groups created via the service request from the Exchange global address list by selecting Yes or No.

Choose one of the following options from the drop-down list to determine how to set the Exchange global address list setting:
- Allow business users to configure this field – Business users can choose whether to hide new groups created via the service request from the Exchange global address list.
- Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
- Hide this field from business users – Your configuration here will not be displayed to business users.
External sharing – Use an external sharing profile to enable unique guest access or external sharing settings for new groups created via the service request and corresponding group team sites. Microsoft 365 Groups with the profile applied can have more restrictive settings than the global configurations in the Microsoft 365 admin center.

Select an external sharing profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new external sharing profile in the Create group external sharing profile panel. For detailed instructions, refer to Configure Microsoft 365 Group External Sharing Profiles.

Choose one of the following options from the drop-down list to determine how to set the external sharing settings:
- Require business users to configure this field – Business users are required to select an external sharing profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the external sharing profile here, and it will be displayed to business users as read-only.
- Hide this field from business users – You select the external sharing profile, and it will not be displayed to business users.
Group contact election – Use the Microsoft 365 Group contact election profile to automate the group contact election process, which will be triggered to determine the proper contacts when the primary or secondary group contact is invalid.

Select a group contact election profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new group contact election profile in the Create group contact election profile panel. For detailed instructions, refer to Configure Microsoft 365 Group Contact Election Profiles.

Choose one of the following options from the drop-down list to determine how to set the group contact election process:
- Require business users to configure this field – Business users are required to select a group contact election profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the group contact election profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group contact election profile here and it will not be displayed to business users.
Group members (Dynamically assigned) – You can define rules to dynamically assign members for new groups created via the service request. Please do note that this is not available if you have already added the Group members (Manually added) setting to manually add group members.
- People picker filter profiles – Select a people picker filter profile, and the filter settings will be applied to limit what users can be dynamically assigned as group members.
  
  You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Define dynamic membership rules – To add dynamic membership rules, click Add and configure the following settings in the Define dynamic rules panel. Microsoft 365 users who meet the rules will automatically become group members.
  - Dynamic group membership rule category – Select from Contact information, License, or Organization as the category for the dynamic membership rule.
  - Rule – Select a dynamic membership rule from the drop-down list.
  - Condition – Define the condition to Equals, Contains, or Is of a certain value.
  - Value – Enter a value for the rule. A user whose properties conform to the value will be added to the group. You can choose whether to Allow requesters to define the value.
  You can choose whether to Allow requesters to add or remove dynamic rules in the request form.
  
  After you configure a rule, click Add to list to add it to the list. If you want to remove all the rules in the list, click Clear.
  NOTE
  - The dynamic membership feature was built by Cloud Governance. Cloud Governance did not leverage the dynamic membership feature of Microsoft Entra. Therefore, after a group with dynamic membership is created via a Cloud Governance request, the membership type the group shown in the Microsoft Entra and Microsoft 365 admin center is Assigned, rather than Dynamic.
  - For inactive users that meet the dynamic membership rules but have been blocked in Microsoft Entra, they can still be added as group members. For inactive users who meet the rules but have been deleted in Microsoft Entra, they will not be added to the group.
Group members (Manually added) – Add users, groups (Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups) as members for new groups created via the service request. Note that if you specify a group, the members of the group will be added but not the group itself. This setting is not available if you have already added the Group members (Dynamically assigned) setting to dynamically assign group members.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as group members in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Group members – Enter the names of users as the group members, or enter $ to select from available roles, and the user who takes the role will be the group member. Choose one of the following options from the drop-down list to determine how to set the group members:
  - Allow business users to configure this field – You can select the group members. Business users can choose whether to edit or assign the group members in the request form.
  - Require business users to configure this field – Business users are required to select the group members in the request form.
  - Show this field as read-only to business users – You select the group members and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the group members and they will not be displayed to business users.
- Predefined group members – Predefined group members that you selected here will be the default group members. Enter the names of users as the predefined group members, or enter $ to select from available roles, and the user who takes the role will be the predefined group member.
  
  Choose one of the following options from the drop-down list to determine how to set the group members:
  - Show this field as read-only to business users – The predefined group members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group members will not be displayed to business users.
Group picture – Set the group picture or choose to let your business users upload the group picture in the request form.
- Upload the picture – Click the browse button, select a picture, and click Open. The picture is uploaded, and you can preview it. This picture will be displayed as the default group picture in the request form.
  
  Choose one of the following options from the drop-down list to determine how to set the group picture:
  - Allow business users to configure this field – Business users can configure the group picture in the request form.
  - Hide this field from business users – You set the group picture and it will not be displayed to business users.
- Specify the group picture URL – Enter the SharePoint URL of the picture. Make sure that a Microsoft 365 (All permissions), Cloud Governance for Microsoft 365, or custom app profile has been created for the tenant that contains the picture’s parent site in AvePoint Online Services. The picture will be retrieved from the URL and set as the picture of the created groups.
Group renewal – Use a Microsoft 365 Group renewal profile to determine the renewal schedule and governance details that must be confirmed when a group goes through the renewal process.

Select a group renewal profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new group renewal profile in the Create group renewal profile panel. For detailed instructions, refer to Configure Group Renewal Profiles.

Choose one of the following options from the drop-down list to determine how to set the group renewal process:
- Require business users to configure this field – Business users are required to select a group renewal profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the group renewal profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group renewal profile here and it will not be displayed to business users.
Group team site template – Select a custom site template from the drop-down list for the group team sites created along with new groups.

Choose one of the following options from the drop-down list to determine how to set the group team site template:
- Require business users to configure this field – Business users are required to select the group team site template in the request form.
- Show this field as read-only to business users – You select the group team site template here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group team site template here and it will not be displayed to business users.
NOTE
This field only appears when your Microsoft 365 environment has a custom team site template configured. For more details about the custom site template, refer to the following Microsoft article: SharePoint site template and site script overview.
Group team site storage - Use a storage management profile to allocate storage for group team sites as well as set the site storage threshold for the group team sites created along with new groups.

Select a storage management profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new storage management profile in the Create group storage management profile panel. For detailed instructions, refer to Configure Microsoft 365 Group Storage Management Profiles.

Choose one of the following options from the drop-down list to determine how to set the group team site storage:
- Require business users to configure this field – Business users are required to select a storage management profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the storage management profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the storage management profile here and it will not be displayed to business users.
Hub site – Choose whether to register the group team site as a hub site or associate the group team site with an existing hub site and configure the corresponding settings:
- Register the group team site as a hub site – With this option selected, specify users or groups who can associate sites with the hub.
  
  Choose one of the following options to determine how to set people who can associate with the hub:
  - Allow business uses to configure this field – Business users can select users or groups in the request form.
  - Require business users to configure this field – Business users are required to select users or groups in the request form.
  - Show this field as read-only to business users – You select users or groups and they will be displayed to business users as read-only.
  - Hide this field from business users – You select users or groups and they will not be displayed to business users.
- Associate the group team site with a hub site – Choose one of the following options to set the available hub site scope:
  - All existing hub sites are available for association – With this option selected, all existing hub sites in your tenant will be available for association. Select a default hub site from the Default hub site drop-down list.
    
    Choose one of the following options to determine how to set the hub site:
    - Allow business users to configure this field – Business users choose whether to select a hub site in the request form.
    - Require business users to configure this field – Business users are required to select a hub site in the request form.
    - Show this field as read-only to business users – You select a hub site and it will be displayed to business users as read-only.
    - Hide this field from business users – You select a hub site and it will not be displayed to business users.
  - Defined set of existing hub sites – You define a scope of hub sites that are available for association. Click Add to open the Add hub site panel, select one or more hub sites in the panel, and then click Save to add them to the table.
    
    If you add more than one hub site, select a default site from the Default hub site drop-down list.
    
    Choose one of the following options to determine how to set the hub site:
    - Require business users to configure this field – Business users are required to select a hub site in the request form.
    - Show this field as read-only to business users – You select a hub site and it will be displayed to business users as read-only.
    - Hide this field from business users – You select a hub site and it will not be displayed to business users.
  - Choose whether to Only display hub sites that the requester has permission.
Locale – Select a locale from the drop-down list to specify the way the group team sites created along with new groups display numbers, dates, and time.

Choose one of the following options from the drop-down list to determine how to set the locale:
- Require business users to configure this field – Business users are required to select a locale in the request form.
- Show this field as read-only to business users – You select a locale here and it will be displayed to business users as read-only.
- Hide this field from business users – You select a locale here and it will not be displayed to business users.
Outlook experience – Choose whether to Hide the group from the Outlook client by selecting Yes or No. If you choose Yes, new groups created via the service request will not be shown in the Outlook client.
Outside senders – Choose whether to allow users outside the organization to send emails to new groups by selecting Yes or No.

Choose from one of the following options from the drop-down list to determine how to configure the outside senders settings:
- Require business users to configure this field – Business users are required to choose whether to allow outside senders in the request form.
- Show this field as read-only to business users – You select whether to allow outside senders here and it will be displayed to business users as read-only.
- Hide this field from business users – You select whether to allow outside senders here and it will not be displayed to business users.
Send as – Add the delegates (users and mail-enabled security groups) who will have the Send as permission to send emails from the group. From the recipient's perspective, the emails were sent by the group.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send as permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send as – Enter the names of users or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send as permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send as permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send as – Predefined delegates that you selected here will be the default delegates with the Send as permission. Enter the names of users or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
Send on behalf – Add the delegates (users, distribution groups, and mail-enabled security groups) who will have the Send on behalf permission to send emails on behalf of the group.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send on behalf permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send on behalf – Enter the names of users, distribution groups, or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send on behalf permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send on behalf permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send on behalf – Predefined delegates that you selected here will be the default delegates with the Send on behalf permission. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
Site information card – With this setting added to the service, the Site Information Card will be automatically added into the group team sites created along with new Microsoft 365 Groups.
Subscribe members – Choose whether to allow Microsoft 365 Group members to receive copies of group conversations and events by selecting Yes or No.

Choose from one of the following options from the drop-down list to determine how to configure this setting:
- Require business users to configure this field – Business users are required to configure this setting in the request form.
- Show this field as read-only to business users – You select an option here and it will be displayed to business users as read-only.
- Hide this field from business users – You select an option here and it will not be displayed to business users.
Time zone – Select a standard time zone for the group team sites created along with new groups.

Choose one of the following options from the drop-down list to determine how to set the time zone:
- Require business users to configure this field – Business users are required to select a time zone in the request form.
- Show this field as read-only to business users – You select a time zone here, and it will be displayed to business users as read-only.
- Hide this field from business users – You select a time zone here, and it will not be displayed to business users.
Welcome email – Choose whether to send a welcome email to users when they are added to the Microsoft 365 Groups by selecting Yes or No. If you choose Yes, users will receive the welcome email when they are added to groups.

Create Security Group Service

A Create security group service allows you to define the security group provisioning request template for your business users. You can customize the settings for security groups created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create security group service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New distribution groups created via the service request will reside in the chosen tenant.
Security group name & description – Choose to let your business users manually enter group names in the request form, or you set construction rules for the group names, and decide whether requesters can use a group name that is already in use.
- Construct group name – If you leave the checkbox deselected, business users can specify group names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the group name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the group name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build group names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for group names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build group names. This field will be displayed to business users as read-only.
- Do not allow duplicate group names – With the checkbox selected, business users who submit the request via this service will not be allowed to create a group with a name that is already in use.
- Group description – Enter a description for the group.
  
  Choose one of the following options from the drop-down list to determine how to set the group description:
  - Allow business users to configure this field – You can enter a group description. Business users can edit the group description in the request form.
  - Require business users to configure this field – Business users are required to configure the group description in the request form.
  - Show this field as read-only to business users – The group description will be displayed to business users as read-only.
  - Hide this field from business users – The group description will not be displayed to business users.
Security group contact – Select the primary contact and/or secondary contact for the new security groups created via the service request.
- Primary contact – The primary contact will be responsible for managing the new security groups.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
  - Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary group contact in the request form.
    - Show this field as read-only to business users – You select the primary group contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary group contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when group provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new security groups when the primary contact is unavailable.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
  - Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Require business users to configure this field – Business users are required to select the secondary group contact in the request form.
    - Show this field as read-only to business users – You select the secondary group contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary group contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when group provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.

Members – Add users, groups (distribution groups, mail-enabled security groups, or security groups) as members for new security groups created via the service request. Note that if you specify a group, the members of the group will be added but not the group itself.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as security group members in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Group members – Enter the names of users or groups as the security group members, or enter $ to select from available roles, and the user who takes the role will be the group member. Choose one of the following options from the drop-down list to determine how to set the group members:
  - Allow business users to configure this field – You can select the group members. Business users can choose whether to edit or assign the group members in the request form.
  - Require business users to configure this field – Business users are required to select the group members in the request form.
  - Show this field as read-only to business users – You select the group members and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the group members and they will not be displayed to business users.
- Predefined group members – Predefined group members that you selected here will be the default group members. Enter the names of users as the predefined group members, or enter $ to select from available roles, and the user who takes the role will be the predefined group member.
  
  Choose one of the following options from the drop-down list to determine how to set the group members:
  - Show this field as read-only to business users – The predefined group members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group members will not be displayed to business users.
Owners – Add one or more Microsoft 365 users or user roles as the owners of the new groups created via the service request. Note that only Microsoft 365 users who have mailboxes are allowed to be specified as group owners.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as security group owners in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Group owners – Enter the names of users as the security group owners, or enter $ to select from available roles, and the user who takes the role will be the group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Require business users to configure this field – Business users are required to select the group owners in the request form.
  - Show this field as read-only to business users – You select the group owners, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the group owners, and they will not be displayed to business users.
- Predefined group owners – Predefined group owners that you selected here will be the default group owners. Enter the names of users as the predefined group owners, or enter $ to select from available roles, and the user who takes the role will be the predefined group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Show this field as read-only to business users – The predefined group owners will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group owners will not be displayed to business users.
Security group contact election – Use the group contact election profile to automate the security group contact election process, which will be triggered to determine the proper contacts when the primary or secondary group contact is invalid.

Select a group contact election profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new group contact election profile in the Create Microsoft Entra group contact election profile panel. For detailed instructions, refer to Configure Microsoft Entra Group Contact Election Profiles.

Choose one of the following options from the drop-down list to determine how to set the group contact election process:
- Require business users to configure this field – Business users are required to select a group contact election profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the group contact election profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group contact election profile here and it will not be displayed to business users.
Security group renewal – Use a group renewal profile to determine the renewal schedule and governance details that must be confirmed when a security group goes through the renewal process.

Select a group renewal profile for new groups. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new group renewal profile in the Create Microsoft Entra group renewal profile panel. For detailed instructions, refer to Configure Microsoft Entra Group Renewal Profiles.

Choose one of the following options from the drop-down list to determine how to set the site collection renewal process:
- Require business users to configure this field – Business users are required to select a group renewal profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the group renewal profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group renewal profile here and it will not be displayed to business users.

Create Library Service

A Create library service allows you to define the library provisioning service request template for your business users. You can customize the settings for libraries created by this service as well as configure available options for your business users to choose from when requesting this service.

The following settings are the default settings of a Create library service, and they are required to be configured:

Library name & description – Specify a name and description for the library.

Library name – Choose to let your business users manually enter the library name in the request form or you set rules for the name. You can also set prefix and suffix to construct the name.
- Manually enter the library name – Enter a name of the library.
  
  Choose one of the following options from the drop-down library to determine how to set the library name:
  - Require business users to configure this field – Business users are required to specify the library name in the request.
  - Show this field as read-only to business users – You specify the library name, and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify the library name, and it will not be displayed to business users.
- Construct library name – If you leave the checkbox deselected, business users can specify library names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the name, select Text, Metadata, or Attribute from the drop-down library as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, Lookup, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down library to determine how to set the library name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build library names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for library names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build library names. This field will be displayed to business users as read-only.
Description – Enter a description of the library.

To determine how to set the library description, choose one of the following options from the drop-down library:
- Allow business users to configure this field – You can specify a library description here, and business users are allowed to customize the description in the request form.
- Require business users to configure this field – Business users are required to specify the library description in the request.
- Show this field as read-only to business users – You specify the library description here and it will be displayed to business users as read-only.
- Hide this field from business users – You specify the library description here and it will not be displayed to business users.
Scope – Select the SharePoint Online environments as the service request scope:
- Choose from scope – Add one or more containers/sites as the service request scope. Click Add to open the Select scope from tree panel, select one or more containers/sites from the data tree, and then click Add to add the selected containers/sites to the table.
  
  In the panel, you can also enter the keyword of a container/site in the search box to search for a container/site.
- Manually enter the URL – Enter a site collection URL in the text box and click Add to add the URL to the table. You can add multiple URLs.
- Inherit from the previous service – If you have already added a Create team, Create Microsoft 365 Group, or Create site collection service to the flow in the previous step, you can choose this option to use the object created in the service as the service request scope.

Apart from the default settings, you can click the add button to add any of the following settings to Create library service based on your requirement, and then complete the configurations:

Document version history – Specify whether a version is created each time you edit a file in this library.
- Require content approval for submitted files? – Specify whether new files or changes to existing files should remain in a draft state until they have been approved by choosing from Yes or No.
- Create a version each time you edit a file in this library?
  - No versioning – Do not create a version when a file in this library is edited.
  - Create major versions (Example: 1, 2, 3, 4) – Create a major version each time a file in this library is edited.
    
    You can limit the number of versions that you wish to retain. To limit the number of major versions, enter a number in the text box for the Keep the following number of major versions option.
  - Create major and minor (draft) versions (Example: 1.0, 1.1, 1.2, 2.0) – Create major and minor versions each time a file in this library is edited.
    
    You can limit the number of versions that you wish to retain. To limit the number of major versions, enter a number in the text box for the Keep the following number of major versions option. You can also keep drafts for major versions by selecting the checkbox before Keep drafts for the following number of major versions and enter a number in the text box.
Choose one of the following options from the drop-down list to determine how to set the document version history:
- Allow business users to configure this filed – You can set the document version history settings here, and business users are allowed to change the settings in the request form.
- Show this field as read-only to business users – You set the document version history settings here and they will be displayed to business users as read-only.
- Hide this field from business users – You set the document version history settings here and they will not be displayed to business users.
Library templates – You can add one or more library templates that will be available to be selected in the service request if the library template is enabled in Management > Profiles & templates > Library templates.

Click Add to open the Add library template panel, select one or more library templates, and then click Add to add your selected templates to the table. You must select a library template as the Default template.

Choose one of the following options from the drop-down list to determine how to configure the library template:
- Require business users to configure this field – Business users are required to select a library template in the request form from what you’ve selected here.
- Show this field as read-only to business users – You select a library template here and it will be displayed to business users as read-only.
- Hide this field from business users – You select a library template here and it will not be displayed to business users.
Library URL – Choose to let your business users specify the library URL in the request form or you set rules to construct the library URL.

If you leave the Construct library URL checkbox deselected, business users can specify the library URL in the request form. With the checkbox selected, click Add to add rules and choose to use the rule value, such as metadata or Library name, to build the library URL.

If multiple rules are added, you can choose whether to specify characters to connect the rule values in the URL. You can also choose whether to automatically add a sequence number to the end of the library URL.

Choose one of the following options from the drop-down list to determine how to configure the library URL:
- Require business users to configure this field – The URL rules configured here will be used to generate the library URL. In the request form, the generated library URL will be displayed to business users as the default URL, and business users can modify the URL. If no default URL is generated based on the construction rule, business users are required to specify the library URL.
- Show this field as read-only to business users – The URL rules configured here will be used to generate the library URL. In the request form, the generated library URL will be displayed to business users as read-only.
- Hide this field from business users – The URL rules configured here will be used to generate the library URL and it will not be displayed to business users.
Library URL validation – Select a text validation rule from the drop-down list. The library URL will be validated against the regular expression set in the text validation rule.
Navigation – Choose whether to display this library or list in the Quick Launch of the site by choosing from Yes or No.

Choose one of the following options from the drop-down list to determine how to set the navigation setting:
- Allow business users to configure this field – You can set the navigation setting here, and business users are allowed to change the setting in the request form.
- Show this field as read-only to business users – You set the navigation setting here, and it will be displayed to business users as read-only.
- Hide this field from business users – You set the navigation setting here, and it will not be displayed to business users.
Notify Opus about new files – This option is to enable the Opus webhook service to monitor special operations in SharePoint Online and trigger additional processes.
Permission management – Allow business users to break permission inheritance for the library. You can choose whether to Prevent users from requesting the following permission levels. With the checkbox selected, select the permission levels you want to exclude from the permission level scope. When business users grant permissions to users/groups, the selected permission levels are not displayed in the service requests.

Create List Service

A Create list service allows you to define the list provisioning service request template for your business users. You can customize the settings for lists created by this service as well as configure available options for your business users to choose from when requesting this service.

The following settings are the default settings of a Create list service, and they are required to be configured:

List name & description – Specify a name and description for the list.

List name – Choose to let your business users manually enter the list name in the request form or you set rules for the name. You can also set prefix and suffix to construct the name.
- Manually enter the list name – Enter a name of the list.
  
  Choose one of the following options from the drop-down list to determine how to set the list name:
  - Require business users to configure this field – Business users are required to specify the list name in the request.
  - Show this field as read-only to business users – You specify the list name, and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify the list name, and it will not be displayed to business users.
- Construct list name – If you leave the checkbox deselected, business users can specify list names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, Lookup, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the list name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build list names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for list names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build list names. This field will be displayed to business users as read-only.
Description – Enter a description of the list.

To determine how to set the list description, choose one of the following options from the drop-down list:
- Allow business users to configure this filed – You can specify a list description here, and business users are allowed to customize the description in the request form.
- Require business users to configure this field – Business users are required to specify the list description in the request.
- Show this field as read-only to business users – You specify the list description here and it will be displayed to business users as read-only.
- Hide this field from business users – You specify the list description here and it will not be displayed to business users.
Scope – Select the SharePoint Online environments as the service request scope:
- Choose from scope – Add one or more containers/sites as the service request scope. Click Add to open the Select scope from tree panel, select one or more containers/sites from the data tree, and then click Add to add the selected containers/sites to the table.
  
  In the panel, you can also enter the keyword of a container/site in the search box to search for a container/site.
- Manually enter the URL – Enter a site collection URL in the text box and click Add to add the URL to the table. You can add multiple URLs.
- Inherit from the previous service – If you have already added a Create list service to the flow in the previous step, you can choose this option to use the tenant configured in the Create list service as the service request scope.
List templates – You can add one or more list templates that will be available to be selected in the service request from Generic list and Events list.

Click Add to open the Add list template panel, select one or more list templates, and then click Add to add your selected templates to the table. You must select a list template as the Default template.

Choose one of the following options from the drop-down list to determine how to configure the list template:
- Require business users to configure this field – Business users are required to select a list template in the request form from what you’ve selected here.
- Show this field as read-only to business users – You select a list template here and it will be displayed to business users as read-only.
- Hide this field from business users – You select a list template here and it will not be displayed to business users.

Apart from the default settings, you can click the add button to add any of the following settings to Create list service based on your requirement, and then complete the configurations:

Item version history – Specify whether a version is created each time you edit an item in this list.
- Require content approval for submitted items? – Specify whether new items or changes to existing items should remain in a draft state until they have been approved by choosing from Yes or No.
- Create a version each time you edit an item in thislist? – Specify whether to create a new version each time an item is edited in the list by choosing from Yes or No. If you choose Yes, you can limit the number of versions that you wish to retain. To limit the number of major versions, enter a number in the text box for the Keep the following number of versions option.
  
  NOTE
  If you choose Yes for both options, you can keep drafts for major versions by selecting the checkbox before Keep drafts for the following number of approved versions and enter a number in the text box.
- Allow business users to configure this field – You can set the item version history settings here, and business users are allowed to change the settings in the request form.
- Show this field as read-only to business users – You set the item version history settings here and they will be displayed to business users as read-only.
- Hide this field from business users – You set the item version history settings here and they will not be displayed to business users.
List URL – Choose to let your business users specify the list URL in the request form or you set rules to construct the list URL.

If you leave the Construct URL checkbox deselected, business users can specify the list URL in the request form. With the checkbox selected, click Add to add rules and choose to use the rule value, such as metadata or List name, to build the list URL.

If multiple rules are added, you can choose whether to specify characters to connect the rule values in the URL. If no characters are defined, rule values will be automatically connected by adding a sequence number to the end of the list URL.

Choose one of the following options from the drop-down list to determine how to configure the list template:
- Require business users to configure this field – The URL rules configured here will be used to generate the list URL. In the request form, the generated list URL will be displayed to business users as the default URL, and business users can modify the URL. If no default URL is generated based on the construction rule, business users are required to specify the list URL.
- Show this field as read-only to business users – The URL rules configured here will be used to generate the list URL. In the request form, the generated list URL will be displayed to business users as read-only.
- Hide this field from business users – The URL rules configured here will be used to generate the list URL and it will not be displayed to business users.
List URL validation – Select a URL validation rule from the drop-down list to determine what rule is applied to validate the URL on the request form

You can click View rule details to view the details of the selected validation rule. You can also click the create button to create a new rule. For more information about how to create a validation rule, refer to Configure Text Validation Rules.
Navigation – Choose whether to display this list or list in the Quick Launch of the site by choosing from Yes or No.

Choose one of the following options from the drop-down list to determine how to set the navigation setting:
- Allow business users to configure this filed – You can set the navigation setting here, and business users are allowed to change the setting in the request form.
- Show this field as read-only to business users – You set the navigation setting here, and it will be displayed to business users as read-only.
- Hide this field from business users – You set the navigation setting here, and it will not be displayed to business users.

Create Power BI Workspace Service

A Create Power BI workspace service allows you to define the Power BI workspace provisioning service request template for your business users. You can customize the settings for Power BI workspaces created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are default settings of a Create Power BI workspace service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New Power BI workspaces created via the service request will reside in the chosen tenant.

To select your tenant here, make sure the Cloud Governance for Power Platform service app profile has been created for the tenant in AvePoint Online Services.
Workspace name – Choose to let your business users manually enter Power BI workspace names in the request form, or you set construction rules for the workspace names.
- Construct workspace name – If you leave the checkbox deselected, business users can specify workspace names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the workspace name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the workspace name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build workspace names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for workspace names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build workspace names. This field will be displayed to business users as read-only.
Workspace contact – Select the primary contact and/or secondary contact for the new Power BI workspaces created via the service request.
- Primary contact – The primary contact will be responsible for managing the new Power BI workspaces.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen in the end user request form.
    
    You can click View profile details to view details of your selected profile. To create a people picker filter profile, click the create button or go to Management > Profiles & templates > People picker filter profiles. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
  - Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary workspace contact in the request form.
    - Show this field as read-only to business users – You select the primary workspace contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary workspace contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when workspace provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new Power BI workspaces when the primary contact is unavailable.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as the secondary contact in the end user request form.
    
    You can click View profile details to view details of your selected profile. To create a people picker filter profile, click the create button or go to Management > Profiles & templates > People picker filter profiles. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
  - Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Allow business users to configure this field – Business users can select the secondary workspace contact in the request form.
    - Require business users to configure this field – Business users are required to select the secondary workspace contact in the request form.
    - Show this field as read-only to business users – You select the secondary workspace contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary workspace contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when workspace provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
Workspace admins – Specify the admins of new Power BI workspaces created via the service requests, or let your business users configure this in the request form.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as workspace admins in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Workspace admins – Enter the name of users or groups (Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups) as the default workspace admins, or enter $ to select from available roles, and the user who takes the role will be the default workspace admin. Choose one of the following options from the drop-down list to determine how to set the workspace admins:
  - Require business users to configure this field – Business users are required to select the workspace admins in the request form.
  - Show this field as read-only to business users – You select the workspace admins, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the workspace admins, and they will not be displayed to business users.
- Predefined workspace admins – Predefined workspace admins that you selected here will be the default workspace admins. Enter the names of users or groups as the predefined workspace admins, or enter $ to select from available roles, and the user who takes the role will be the predefined workspace admin. Choose one of the following options from the drop-down list to determine how to set the workspace admins:
  - Show this field as read-only to business users – The predefined workspace admins will be displayed to business users as read-only.
  - Hide this field from business users – The predefined workspace admins will not be displayed to business users.

Apart from the default settings, you can click the add button to add any of the following settings to a Create Power BI workspace service based on your requirement, and then complete the configurations:

Workspace contact election – Use the workspace contact election profile to automate the workspace contact election process, which will be triggered to determine the proper contacts when the primary or secondary workspace contact is deactivated.

Select a workspace contact election profile for new workspaces. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new Power BI workspace contact election profile in the Create Power BI workspace contact election profile panel. For detailed instructions, refer to Configure Power BI Workspace Contact Election Profiles.

Choose one of the following options from the drop-down list to determine how to set the workspace contact election process:
- Require business users to configure this field – Business users are required to select a Power BI workspace contact election profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the Power BI workspace contact election profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the Power BI workspace contact election profile here and it will not be displayed to business users.
Workspace contributors – Specify the contributors of new Power BI workspaces created via the service requests, or let your business users configure this in the request form.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as workspace contributors in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Workspace contributors – Enter the name of users or groups (Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups) as the default workspace contributors, or enter $ to select from available roles, and the user who takes the role will be the default workspace contributor. Choose one of the following options from the drop-down list to determine how to set the workspace contributors:
  - Allow business users to configure this field – Business users can select the workspace contributors in the request form.
  - Require business users to configure this field – Business users are required to select the workspace contributors in the request form.
  - Show this field as read-only to business users – You select the workspace contributors, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the workspace contributors, and they will not be displayed to business users.
- Predefined workspace contributors – Predefined workspace contributors that you selected here will be the default workspace contributors. Enter the names of users or groups as the predefined workspace contributors, or enter $ to select from available roles, and the user who takes the role will be the predefined workspace contributor. Choose one of the following options from the drop-down list to determine how to set the workspace contributors:
  - Show this field as read-only to business users – The predefined workspace contributors will be displayed to business users as read-only.
  - Hide this field from business users – The predefined workspace contributors will not be displayed to business users.
Workspace members – Specify the members of new Power BI workspaces created via the service requests, or let your business users configure this in the request form.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as workspace members in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Workspace members – Enter the name of users or groups (Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups) as the default workspace members, or enter $ to select from available roles, and the user who takes the role will be the default workspace member. Choose one of the following options from the drop-down list to determine how to set the workspace members:
  - Allow business users to configure this field – Business users can select the workspace members in the request form.
  - Require business users to configure this field – Business users are required to select the workspace members in the request form.
  - Show this field as read-only to business users – You select the workspace members, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the workspace members, and they will not be displayed to business users.
- Predefined workspace members – Predefined workspace members that you selected here will be the default workspace members. Enter the names of users or groups as the predefined workspace members, or enter $ to select from available roles, and the user who takes the role will be the predefined workspace member. Choose one of the following options from the drop-down list to determine how to set the workspace members:
  - Show this field as read-only to business users – The predefined workspace members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined workspace members will not be displayed to business users.
Workspace renewal – Use a workspace renewal profile to determine the renewal schedule and governance details that must be confirmed when a Power BI workspace goes through the renewal process.

Select a Power BI workspace renewal profile for new workspaces. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new Power BI workspace renewal profile in the Create Power BI workspace renewal profile panel. For detailed instructions, refer to Configure Power BI Workspace Renewal Profiles.

Choose one of the following options from the drop-down list to determine how to set the Power BI workspace renewal process:
- Require business users to configure this field – Business uses are required to select a Power BI workspace renewal profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the Power BI workspace renewal profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the Power BI workspace renewal profile here and it will not be displayed to business users.
Workspace viewers – Specify the viewers of new Power BI workspaces created via the service requests, or let your business users configure this in the request form.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as workspace viewers in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Workspace viewers – Enter the name of users or groups (Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups) as the default workspace viewers, or enter $ to select from available roles, and the user who takes the role will be the default workspace viewer. Choose one of the following options from the drop-down list to determine how to set the workspace viewers:
  - Allow business users to configure this field – Business users can select the workspace viewers in the request form.
  - Require business users to configure this field – Business users are required to select the workspace viewers in the request form.
  - Show this field as read-only to business users – You select the workspace viewers, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the workspace viewers, and they will not be displayed to business users.
- Predefined workspace viewers – Predefined workspace viewers that you selected here will be the default workspace viewers. Enter the names of users or groups as the predefined workspace viewers, or enter $ to select from available roles, and the user who takes the role will be the predefined workspace viewer. Choose one of the following options from the drop-down list to determine how to set the workspace viewers:
  - Show this field as read-only to business users – The predefined workspace viewers will be displayed to business users as read-only.
  - Hide this field from business users – The predefined workspace viewers will not be displayed to business users.

Create Equipment Mailbox Service

A Create equipment mailbox service allows you to define the equipment mailbox provisioning service request template for your business users. You can customize the settings for equipment mailboxes created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create equipment mailbox service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New equipment mailboxes created via the service request will reside in the chosen tenant.

To select your tenant here, make sure an app profile for Cloud Governance for Exchange service app has been created in AvePoint Online Services. If your tenant uses the custom app, make sure you add the Exchange.ManageAsApp permission to the custom Azure app, assign the Exchange Administrator role to the app, and re-authorize the app.
Multi-Geo locations – This section appears only when your Microsoft 365 tenant has the Multi-Geo Capabilities in Microsoft 365 service plan. By default, new equipment mailboxes will be created in your tenant’s central location. The central location is the geo location where your tenant was originally provisioned.

To enable equipment mailbox provisioning in multi-geo locations, choose one of the following options and configure the corresponding settings:
- Select specific geo locations – If you allow equipment mailbox data to be stored in different geo locations, select geo locations to set the scope, and your business users will choose geo locations from the scope.
  
  Click Add to open the Region panel, select one or more geo locations in the panel, and then click Add to add them to the table.
  
  If you add more than one geo location, select a default location from the Default geo location drop-down list.
  
  Choose one of the following options to determine how to set the geo locations:
  - Require business users to configure this field – Business users are required to select the geo location in the request form.
  - Show this field as read-only to business users – You select the geo location and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the geo location and it will not be displayed to business users.
- Use the preferred data location of the selected user role to determine the geo location – If you do not allow your business users to choose geo locations, you can choose to retrieve the preferred data location (PDL) of the requester or primary equipment mailbox contact as the geo location. Select the $Requester or $Primary contact role from the drop-down list.
  
  NOTE
  If the requester or primary equipment mailbox contact does not have the PDL property, the equipment mailbox will be created in your tenant’s central location.
Equipment name – Choose to let your business users manually enter the equipment name in the request form or you set rules for the name. You can also set prefix and suffix to construct the name.
- Construct equipment name – If you leave the checkbox deselected, business users can specify equipment names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the name, select Text, Metadata, Attribute, or Equipment info from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, Lookup, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the equipment mailbox name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build equipment mailbox names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for equipment mailbox names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build equipment mailbox names. This field will be displayed to business users as read-only.

Email address – Choose to let your business users manually enter the email address in the request form, or you set construction rules for the email address.

Scope – Select the domain scope for the equipment mailbox email address. Then, select a domain from the drop-down list as the Default domain.

Choose one of the following options from the drop-down list to determine how to set the equipment mailbox email address:
- Require business users to configure this field – This setting is required to be configured in a request form. The domain scope you set here will be displayed to business users as available options.
- Show this field as read-only to business users – The domain scope you set here will be displayed to business users as read-only.
- Hide this field from business users – The domain scope will not be displayed to business users.

Construct email address – If you leave the checkbox deselected, business users can specify equipment mailbox email address in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the equipment mailbox email address, select Text, Metadata, Attribute, or Equipment info from the drop-down list as a rule type, and then define the value for the selected rule.

NOTE

The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.

Choose whether to Automatically add a sequence number to the end of the email address. Refer to the example below to enter the sequence number rule.

Sequence Number	Note
{01}	The sequence number at the end of the email address will increase from 01 to 99 in numerical value.
{01*}	The sequence number at the end of the email address will increase from 01 to 9999999 in numerical value.

Choose one of the following options from the drop-down list to determine how to set the equipment mailbox email address:

Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build the equipment mailbox email address.
Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for equipment mailbox email address.
Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build the equipment mailbox email address. This field will be displayed to business users as read-only.

Equipment contact – Select the primary contact and/or secondary contact for the new equipment mailboxes created via the service request.
- Primary contact – The primary contact will be responsible for managing the new equipment mailboxes.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
    
    Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary equipment mailbox contact in the request form.
    - Show this field as read-only to business users – You select the primary equipment mailbox contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary equipment mailbox contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when equipment mailbox provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new equipment mailboxes when the primary contact is unavailable.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
    
    Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Allow business users to configure this field – Business users can choose whether to select the secondary equipment mailbox contact in the request form.
    - Require business users to configure this field – Business users are required to select the secondary equipment mailbox contact in the request form.
    - Show this field as read-only to business users – You select the secondary equipment mailbox contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary equipment mailbox contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when equipment mailbox provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.

Apart from the default settings, you can click the add button to add any of the following settings to a Create equipment mailbox group service based on your requirement, and then complete the configurations:

Address book policy – Specify an address book policy (ABP) for the equipment mailbox.

Click Add to open the Add address book policy panel, select one or more policies in the panel, and then click Add to add them to the table.

If you add more than one address book policies, select a default policy from the Default address book policy drop-down list.

Choose one of the following options to determine how to set the address book policies:
- Require business users to configure this field – Business users are required to select the address book policy in the request form.
- Show this field as read-only to business users – You select the address book policy and it will be displayed to business users as read-only.
- Hide this field from business users – You select the address book policy and it will not be displayed to business users.
Booking delegate settings – Choose whether to automatically accept or decline the booking request or designate a person responsible for the approval.
- Booking request – You choose to accept or decline booking requests automatically or specify delegates who can accept or decline booking requests.
  
  Choose one of the following options to determine how to set the booking request:
  - Require business users to configure this field – Business users are required to choose whether to specify delegates to accept or decline booking requests.
  - Show this field as read-only to business users – You choose whether to specify delegates to accept or decline booking requests and it will be displayed to business users as read-only.
  - Hide this field from business users – You choose whether to specify delegates to accept or decline booking requests and it will not be displayed to business users.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Booking delegates – Enter the names of users, distribution groups, or mail-enabled security groups as booking delegates, or enter $ to select from available roles, and the user who takes the role will be the booking delegate.
  
  Choose one of the following options from the drop-down list to determine how to set the booking delegate:
  - Require business users to configure this field – Business users are required to select the booking delegate in the request form.
  - Show this field as read-only to business users – You select the booking delegate and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the booking delegate and they will not be displayed to business users.
- Predefined booking delegates – Enter the names of users, distribution groups, or mail-enabled security groups as booking delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined booking delegate.
  
  Choose one of the following options from the drop-down list to determine how to set the predefined booking delegate:
  - Show this field as read-only to business users – You select the predefined booking delegate and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the predefined booking delegate and they will not be displayed to business users.
Booking settings – Define when the equipment can be scheduled, how long it can be reserved, and how far in advance it can be reserved.

You can choose to:
- Allow repeated meetings – Choose whether to allow repeated meetings for the equipment.
  
  Choose one of the following options from the drop-down list to determine how to configure this setting:
  - Require business users to configure this field – Business users are required to configure this setting in the request form.
  - Show this field as read-only to business users – You configure this setting and it will be displayed to business users as read-only.
  - Hide this field from business users – You configure this setting and it will not be displayed to business users.
- Allow scheduling only during working hours – Choose whether to allow the meeting requests that are only scheduled during the working hours for the equipment.
  
  Choose one of the following options from the drop-down list to determine how to configure this setting:
  - Require business users to configure this field – Business users are required to configure this setting in the request form.
  - Show this field as read-only to business users – You configure this setting and it will be displayed to business users as read-only.
  - Hide this field from business users – You configure this setting and it will not be displayed to business users.
- Automatically decline meetings outside this limit – Choose whether to decline meetings outside the specified limit. With the option selected, configure the following settings:
  - Booking window (days) – Specify the maximum number of days in advance that equipment can be booked. The default value is 180 days.
  - Maximum duration (hours) – Specify the maximum duration that the equipment can be reserved in a booking request. The default value is 24 hours.
  Choose one of the following options from the drop-down list to determine how to configure this setting:
  - Require business users to configure this field – Business users are required to configure this setting in the request form.
  - Show this field as read-only to business users – You configure this setting and it will be displayed to business users as read-only.
  - Hide this field from business users – You configure this setting and it will not be displayed to business users.
- Automatic reply message – Enter the automatic reply message that will be sent to the meeting organizer.
  
  Choose one of the following options from the drop-down list to determine how to configure the automatic reply message:
  - Allow business users to configure this field – Business users can customize the text for the automatic reply message in the request form.
  - Require business users to configure this field – Business users are required to customize the text for the automatic reply message in the request form.
  - Show this field as read-only to business users – You specify the text of the automatic reply message in the request form and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify the text of the automatic reply message in the request form and it will not be displayed to business users.
Capacity – Specify the maximum number of people who can use this equipment mailbox.

Choose one of the following options from the drop-down list to determine how to set the capacity:
- Allow business users to configure this field – Business users can specify the capacity in the request form.
- Require business users to configure this field – Business users are required to specify the capacity in the request form.
- Show this field as read-only to business users – You specify the capacity in the request form and it will be displayed to business users as read-only.
- Hide this field from business users – You specify the capacity in the request form and it will not be displayed to business users.
Company – Specify a company that the equipment mailbox is associated with.
- Manually specify the company – Enter the company that the equipment mailbox is associated with in the text box.
  
  Choose one of the following options from the drop-down list to determine how to set the company:
  - Allow business users to configure this field – Business users can specify the company in the request form.
  - Require business users to configure this field – Business users are required to specify the company in the request form.
  - Show this field as read-only to business users – You specify the company in the request form and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify the company in the request form and it will not be displayed to business users.
- Use the company value of the selected user role – Select a user role to get the company value. You can select $Requester, $Primary contact, or $Secondary contact from the drop-down list.
  
  Choose one of the following options from the drop-down list to determine how to set the company:
  - Show this field as read-only to business users – You select a user role to get the company value. The company value will be displayed to business users as read-only.
  - Hide this field from business users – You select a user role to get the company value. The company value will not be displayed to business users.
Contact information – Configure the contact information of the equipment mailbox. Configure the following settings:
- Location
- Phone number
- Street
- City
- Zip/Postal code
- State/Province
- Country/Region
- Notes
Choose one of the following options from the drop-down list to determine how to set the contact information settings:
- Allow business users to configure this field – Business users can configure the contact information settings in the request form.
- Require business users to configure this field – Business users are required to configure the contact information settings in the request form.
- Show this field as read-only to business users – You configure the contact information settings in the request from and they will be displayed to business users as read-only.
- Hide this field from business users – You configure the contact information settings in the request form and they will not be displayed to business users.
Department – Specify a department that the equipment mailbox is associated with.
- Manually specify the department – Enter the department that the equipment mailbox is associated with in the text box.
  
  Choose one of the following options from the drop-down list to determine how to set the department:
  - Allow business users to configure this field – Business users can specify the department in the request form.
  - Require business users to configure this field – Business users are required to specify the department in the request form.
  - Show this field as read-only to business users – You specify the department in the request form and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify the department in the request form and it will not be displayed to business users.
- Use the department value of the selected user role – Select a user role to get the department value. You can select $Requester, $Primary contact, or $Secondary contact from the drop-down list.
  
  Choose one of the following options from the drop-down list to determine how to set the department:
  - Show this field as read-only to business users – You select a user role to get the department value. The department value will be displayed to business users as read-only.
  - Hide this field from business users – You select a user role to get the department value. The department value will not be displayed to business users.
Disable equipment mailbox associated account – Choose whether to Prevent the equipment mailbox associated account from being able to sign in by selecting Yes or No. If you choose Yes, the account will be disabled to be prevented from signing in.

Choose one of the following options from the drop-down list to determine how to configure the setting:
- Require business users to configure this field – Business users are required to select whether to prevent the equipment mailbox associated account from signing in.
- Show this field as read-only to business users – You can choose whether you want to prevent the equipment mailbox associated account from signing in and it will be displayed to business users as read-only.
- Hide this field from business users – You can choose whether you want to prevent the equipment mailbox associated account from signing in and it will not be displayed to business users.
Equipment mailbox alias – The alias specifies the Exchange alias (also known as the mail nickname) for the recipient. This value identifies the recipient as a mail-enabled object and shouldn't be confused with multiple email addresses for the same recipient (also known as proxy addresses). If an alias is not provided, then it will be the same as the username specified in the email address field.

Choose one of the following options from the drop-down list to determine how to set the equipment mailbox members:
- Allow business users to configure this field – Business users can choose whether to specify the equipment mailbox alias in the request form.
- Require business users to configure this field – Business users are required to specify the equipment mailbox alias in the request form.
Exchange global address list – Choose whether to hide new equipment mailboxes created via the service request from the Exchange global address list by selecting Yes or No.

Choose one of the following options from the drop-down list to determine how to set the Exchange global address list setting:
- Allow business users to configure this field – Business users can choose whether to hide new equipment mailboxes created via service request from the Exchange global address list.
- Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
- Hide this field from business users – Your configuration here will not be displayed to business users.
Mail tip – Add a mail tip to alert users of potential issues before they send a booking request to the equipment mailbox. A mail tip is text displayed in the InfoBar when this recipient is added to the To, Cc, or Bcc lines of a new email message.

Choose one of the following options from the drop-down list to determine how to set the mail tip:
- Allow business users to configure this field – Business users can add the mail tip in the request form.
- Require business users to configure this field – Business users are required to add the mail tip in the request form.
- Show this field as read-only to business users – You add the mail tip in the request form and it will be displayed to business users as read-only.
- Hide this field from business users – You add the mail tip in the request form and it will not be displayed to business users.
Read and manage (full access) – Add the delegates who will have the Read and manage (full access) permission. This permission allows a delegate to open this mailbox and behave as the mailbox owner.
- People picker filter profile – Select a people picker filter profile from the drop-down list. The profile will determine what users are available in the people picker fields when adding the delegates.
  
  You can click View profile details to view the details of the selected people picker filter profile. You can also click the create button to create a new profile. For more information about how to create a people picker filter profile, refer to Configure People Picker Filter Profiles.
  
  To retrieve the latest people picker filter profiles that are available, you can click the refresh button.
- Read and manage (full access) – Specify delegates who will have the Read and manage (full access) permission for new equipment mailbox that will be created in this service. Enter one or more Microsoft 365 usernames and/or mail-enabled security group names in the text box. Then, press Enter to check if the names are valid. You can also enter $ to select from the following roles:
  - $Requester
  - $Manager of requester
  - $Primary contact
  - $Secondary contact
  Choose one of the following options from the drop-down list to determine how to set the mail tip:
  - Allow business users to configure this field – Business users can specify the delegates who will have the "Read and manage (full access)" permission in the request form.
  - Require business users to configure this field – Business users are required to specify delegates who will have the "Read and manage (full access)" permission in the request form.
  - Show this field as read-only to business users – You specify delegates who will have the "Read and manage (full access)" permission and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify delegates who will have the "Read and manage (full access)" permission and it will not be displayed to business users.
- Predefined read and manage (full access) – Predefined delegates with the "Read and manage (full access)" will be the default delegates. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
Send as – Add the delegates who will have the Send as permission to send emails from the equipment mailbox. Messages will appear to have been sent from the mailbox owner.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send as permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send as – Enter the names of users, distribution groups, or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send as permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send as permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send as – Predefined delegates that you selected here will be the default delegates with the Send as permission. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
Send on behalf – Add the delegates who will have the Send on behalf permission to send emails on behalf of the equipment mailbox.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send on behalf permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send on behalf – Enter the names of users, distribution groups, or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send on behalf permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send on behalf permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send on behalf – Predefined delegates that you selected here will be the default delegates with the Send on behalf permission. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.

Create Room Mailbox Service

A Create room mailbox service allows you to define the room mailbox provisioning service request template for your business users. You can customize the settings for room mailboxes created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create room mailbox service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New room mailboxes created via the service request will reside in the chosen tenant.

To select your tenant here, make sure an app profile for Cloud Governance for Exchange service app has been created in AvePoint Online Services. If your tenant uses the custom app, make sure you add the Exchange.ManageAsApp permission to the custom Azure app, assign the Exchange Administrator role to the app, and re-authorize the app.
Multi-Geo locations – This section appears only when your Microsoft 365 tenant has the Multi-Geo Capabilities in Microsoft 365 service plan. By default, new room mailboxes will be created in your tenant’s central location. The central location is the geo location where your tenant was originally provisioned.

To enable room mailbox provisioning in multi-geo locations, choose one of the following options and configure the corresponding settings:
- Select specific geo locations – If you allow room mailbox data to be stored in different geo locations, select geo locations to set the scope, and your business users will choose geo locations from the scope.
  
  Click Add to open the Region panel, select one or more geo locations in the panel, and then click Add to add them to the table.
  
  If you add more than one geo location, select a default location from the Default geo location drop-down list.
  
  Choose one of the following options to determine how to set the geo locations:
  - Require business users to configure this field – Business users are required to select the geo location in the request form.
  - Show this field as read-only to business users – You select the geo location and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the geo location and it will not be displayed to business users.
- Use the preferred data location of the selected user role to determine the geo location – If you do not allow your business users to choose geo locations, you can choose to retrieve the preferred data location (PDL) of the requester or primary room mailbox contact as the geo location. Select the $Requester or $Primary contact role from the drop-down list.
  
  NOTE
  If the requester or primary room mailbox contact does not have the PDL property, the room mailbox will be created in your tenant’s central location.
Room name – Choose to let your business users manually enter the room name in the request form or you set rules for the name. You can also set prefix and suffix to construct the name.
- Construct room name – If you leave the checkbox deselected, business users can specify room names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the name, select Text, Metadata, Attribute, or Room info from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, Lookup, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the room mailbox name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build room mailbox names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for room mailbox names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build room mailbox names. This field will be displayed to business users as read-only.

Email address – Choose to let your business users manually enter the email address in the request form, or you set construction rules for the email address.

Scope – Select the domain scope for the room mailbox email address. Then, select a domain from the drop-down list as the Default domain.

Choose one of the following options from the drop-down list to determine how to set the room mailbox email address:
- Require business users to configure this field – This setting is required to be configured in a request form. The domain scope you set here will be displayed to business users as available options.
- Show this field as read-only to business users – The domain scope you set here will be displayed to business users as read-only.
- Hide this field from business users – The domain scope will not be displayed to business users.

Construct email address – If you leave the checkbox deselected, business users can specify room mailbox email address in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the room mailbox email address, select Text, Metadata, Attribute, or Room info from the drop-down list as a rule type, and then define the value for the selected rule.

NOTE

The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, Lookup, or Microsoft Entra Property can be used to set the rule.

Choose whether to Automatically add a sequence number to the end of the email address. Refer to the example below to enter the sequence number rule.

Sequence Number	Note
{01}	The sequence number at the end of the email address will increase from 01 to 99 in numerical value.
{01*}	The sequence number at the end of the email address will increase from 01 to 9999999 in numerical value.

Choose one of the following options from the drop-down list to determine how to set the room mailbox email address:

Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build the room mailbox email address.
Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for room mailbox email address.
Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build the room mailbox email address. This field will be displayed to business users as read-only.

Room contact – Select the primary contact and/or secondary contact for the new room mailboxes created via the service request.
- Primary contact – The primary contact will be responsible for managing the new room mailboxes.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
    
    Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary room mailbox contact in the request form.
    - Show this field as read-only to business users – You select the primary room mailbox contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary room mailbox contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when room mailbox provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new room mailboxes when the primary contact is unavailable.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
    
    Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Allow business users to configure this field – Business users can choose whether to select the secondary room mailbox contact in the request form.
    - Require business users to configure this field – Business users are required to select the secondary room mailbox contact in the request form.
    - Show this field as read-only to business users – You select the secondary room mailbox contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary room mailbox contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when room mailbox provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.

Apart from the default settings, you can click the add button to add any of the following settings to a Create room mailbox group service based on your requirement, and then complete the configurations:

Additional information – Configure the tags, audio, display, and video details of the room mailbox.
- Wheel chair accessible – Select this option if you want the wheel chair to be accessible to your business users.
  
  Choose one of the following options from the drop-down list to determine how to configure the setting:
  - Require business users to configure this field – Business users are required to select whether to enable the wheel chair accessible.
  - Show this field as read-only to business users – You can choose whether to enable the wheel chair accessible and it will be displayed to business users as read-only.
  - Hide this field from business users – You can choose whether to enable the wheel chair accessible and it will not be displayed to business users.
- Configure the following settings:
  - Tags – Enter the tags of the room mailbox.
  - Audio device name – Enter the audio device name of the room mailbox.
  - Display device name – Enter the display device name of the room mailbox.
  - Video device name – Enter the video device name of the room mailbox.
  Choose one of the following options from the drop-down list to determine how to configure the additional settings:
  - Allow business users to configure this field – Business users can configure the additional settings in the request form.
  - Require business users to configure this field – Business users are required to configure additional settings in the request form.
  - Show this field as read-only to business users – You configure the additional settings in the request from and they will be displayed to business users as read-only.
  - Hide this field from business users – You configure the additional settings in the request form and they will not be displayed to business users
Address book policy – Specify an address book policy (ABP) for the room mailbox.

Click Add to open the Add address book policy panel, select one or more policies in the panel, and then click Add to add them to the table.

If you add more than one address book policies, select a default policy from the Default address book policy drop-down list.

Choose one of the following options to determine how to set the address book policies:
- Require business users to configure this field – Business users are required to select the address book policy in the request form.
- Show this field as read-only to business users – You select the address book policy and it will be displayed to business users as read-only.
- Hide this field from business users – You select the address book policy and it will not be displayed to business users.
Booking delegate settings – Choose whether to automatically accept or decline the booking request or designate a person responsible for the approval.
- Booking request – You choose to accept or decline booking requests automatically or specify delegates who can accept or decline booking requests.
  
  Choose one of the following options to determine how to set the booking request:
  - Require business users to configure this field – Business users are required to choose whether to specify delegates to accept or decline booking requests.
  - Show this field as read-only to business users – You choose whether to specify delegates to accept or decline booking requests and it will be displayed to business users as read-only.
  - Hide this field from business users – You choose whether to specify delegates to accept or decline booking requests and it will not be displayed to business users.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Booking delegates – Enter the names of users, distribution groups, or mail-enabled security groups as booking delegates, or enter $ to select from available roles, and the user who takes the role will be the booking delegate.
  
  Choose one of the following options from the drop-down list to determine how to set the booking delegate:
  - Require business users to configure this field – Business users are required to select the booking delegate in the request form.
  - Show this field as read-only to business users – You select the booking delegate and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the booking delegate and they will not be displayed to business users.
- Predefined booking delegates – Enter the names of users, distribution groups, or mail-enabled security groups as booking delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined booking delegate.
  
  Choose one of the following options from the drop-down list to determine how to set the predefined booking delegate:
  - Show this field as read-only to business users – You select the predefined booking delegate and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the predefined booking delegate and they will not be displayed to business users.
Booking settings – Define when the room can be scheduled, how long it can be reserved, and how far in advance it can be reserved.

You can choose to:
- Allow repeated meetings – Choose whether to allow repeated meetings for the room.
  
  Choose one of the following options from the drop-down list to determine how to configure this setting:
  - Require business users to configure this field – Business users are required to configure this setting in the request form.
  - Show this field as read-only to business users – You configure this setting and it will be displayed to business users as read-only.
  - Hide this field from business users – You configure this setting and it will not be displayed to business users.
- Allow scheduling only during working hours – Choose whether to allow the meeting requests that are only scheduled during the working hours for the room.
  
  Choose one of the following options from the drop-down list to determine how to configure this setting:
  - Require business users to configure this field – Business users are required to configure this setting in the request form.
  - Show this field as read-only to business users – You configure this setting and it will be displayed to business users as read-only.
  - Hide this field from business users – You configure this setting and it will not be displayed to business users.
- Automatically decline meetings outside this limit – Choose whether to decline meetings outside the specified limit. With the option selected, configure the following settings:
  - Booking window (days) – Specify the maximum number of days in advance that a room can be booked. The default value is 180 days.
  - Maximum duration (hours) – Specify the maximum duration that the room can be reserved in a booking request. The default value is 24 hours.
  Choose one of the following options from the drop-down list to determine how to configure this setting:
  - Require business users to configure this field – Business users are required to configure this setting in the request form.
  - Show this field as read-only to business users – You configure this setting and it will be displayed to business users as read-only.
  - Hide this field from business users – You configure this setting and it will not be displayed to business users.
- Automatic reply message – Enter the automatic reply message that will be sent to the meeting organizer.
  
  Choose one of the following options from the drop-down list to determine how to configure the automatic reply message:
  - Allow business users to configure this field – Business users can customize the text for the automatic reply message in the request form.
  - Require business users to configure this field – Business users are required to customize the text for the automatic reply message in the request form.
  - Show this field as read-only to business users – You specify the text of the automatic reply message in the request form and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify the text of the automatic reply message in the request form and it will not be displayed to business users.
Capacity – Specify the maximum number of people who can use this room mailbox.
- Choose one of the following options from the drop-down list to determine how to set the capacity:
- Allow business users to configure this field – Business users can specify the capacity in the request form.
- Require business users to configure this field – Business users are required to specify the capacity in the request form.
- Show this field as read-only to business users – You specify the capacity in the request form and it will be displayed to business users as read-only.
- Hide this field from business users – You specify the capacity in the request form and it will not be displayed to business users.
Company – Specify a company that the room mailbox is associated with.
- Manually specify the company – Enter the company that the room mailbox is associated with in the text box.
  
  Choose one of the following options from the drop-down list to determine how to set the company:
  - Allow business users to configure this field – Business users can specify the company in the request form.
  - Require business users to configure this field – Business users are required to specify the company in the request form.
  - Show this field as read-only to business users – You specify the company in the request form and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify the company in the request form and it will not be displayed to business users.
- Use the company value of the selected user role – Select a user role to get the company value. You can select $Requester, $Primary contact, or $Secondary contact from the drop-down list.
  
  Choose one of the following options from the drop-down list to determine how to set the company:
  - Show this field as read-only to business users – You select a user role to get the company value. The company value will be displayed to business users as read-only.
  - Hide this field from business users – You select a user role to get the company value. The company value will not be displayed to business users.
Contact information – Configure the contact information of the room mailbox. Configure the following settings:
- Location
- Phone number
- Street
- City
- Zip/Postal code
- State/Province
- Country/Region
- Notes
Choose one of the following options from the drop-down list to determine how to set the contact information settings:
- Allow business users to configure this field – Business users can configure the contact information settings in the request form.
- Require business users to configure this field – Business users are required to configure the contact information settings in the request form.
- Show this field as read-only to business users – You configure the contact information settings in the request from and they will be displayed to business users as read-only.
- Hide this field from business users – You configure the contact information settings in the request form and they will not be displayed to business users.
Department – Specify a department that the room mailbox is associated with.
- Manually specify the department – Enter the department that the room mailbox is associated with in the text box.
  
  Choose one of the following options from the drop-down list to determine how to set the department:
  - Allow business users to configure this field – Business users can specify the department in the request form.
  - Require business users to configure this field – Business users are required to specify the department in the request form.
  - Show this field as read-only to business users – You specify the department in the request form and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify the department in the request form and it will not be displayed to business users.
- Use the department value of the selected user role – Select a user role to get the department value. You can select $Requester, $Primary contact, or $Secondary contact from the drop-down list.
  
  Choose one of the following options from the drop-down list to determine how to set the department:
  - Show this field as read-only to business users – You select a user role to get the department value. The department value will be displayed to business users as read-only.
  - Hide this field from business users – You select a user role to get the department value. The department value will not be displayed to business users.
Disable room mailbox associated account – Choose whether to Prevent the room mailbox associated account from being able to sign in by selecting Yes or No. If you choose Yes, the account will be disabled to prevent from signing in.

Choose one of the following options from the drop-down list to determine how to configure the setting:
- Require business users to configure this field – Business users are required to select whether to prevent the room mailbox associated account from signing in.
- Show this field as read-only to business users – You can choose whether you want to prevent the room mailbox associated account from signing in and it will be displayed to business users as read-only.
- Hide this field from business users – You can choose whether you want to prevent the room mailbox associated account from signing in and it will not be displayed to business users.
Exchange global address list – Choose whether to hide new room mailboxes created via the service request from the Exchange global address list by selecting Yes or No.

Choose one of the following options from the drop-down list to determine how to set the Exchange global address list setting:
- Allow business users to configure this field – Business users can choose whether to hide new room mailboxes created via service request from the Exchange global address list.
- Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
- Hide this field from business users – Your configuration here will not be displayed to business users.
Mail tip – Add a mail tip to alert users of potential issues before they send a booking request to the room mailbox. A mail tip is text displayed in the InfoBar when this recipient is added to the To, Cc, or Bcc lines of a new email message.

Choose one of the following options from the drop-down list to determine how to set the mail tip:
- Allow business users to configure this field – Business users can add the mail tip in the request form.
- Require business users to configure this field – Business users are required to add the mail tip in the request form.
- Show this field as read-only to business users – You add the mail tip in the request form and it will be displayed to business users as read-only.
- Hide this field from business users – You add the mail tip in the request form and it will not be displayed to business users.
Read and manage (full access) – Add the delegates who will have the Read and manage (full access) permission. This permission allows a delegate to open this mailbox and behave as the mailbox owner.
- People picker filter profile – Select a people picker filter profile from the drop-down list. The profile will determine what users are available in the people picker fields when adding the delegates.
  
  You can click View profile details to view the details of the selected people picker filter profile. You can also click the create button to create a new profile. For more information about how to create a people picker filter profile, refer to Configure People Picker Filter Profiles.
  
  To retrieve the latest people picker filter profiles that are available, you can click the refresh button.
- Read and manage (full access) – Specify delegates who will have the Read and manage (full access) permission for new room mailbox that will be created in this service. Enter one or more Microsoft 365 usernames and/or mail-enabled security group names in the text box. Then, press Enter to check if the names are valid. You can also enter $ to select from the following roles:
  - $Requester
  - $Manager of requester
  - $Primary contact
  - $Secondary contact
  Choose one of the following options from the drop-down list to determine how to set the mail tip:
  - Allow business users to configure this field – Business users can specify the delegates who will have the "Read and manage (full access)" permission in the request form.
  - Require business users to configure this field – Business users are required to specify delegates who will have the "Read and manage (full access)" permission in the request form.
  - Show this field as read-only to business users – You specify delegates who will have the "Read and manage (full access)" permission and it will be displayed to business users as read-only.
  - Hide this field from business users – You specify delegates who will have the "Read and manage (full access)" permission and it will not be displayed to business users.
- Predefined read and manage (full access) – Predefined delegates with the "Read and manage (full access)" will be the default delegates. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
Room list – The room list here refers to a special type of distribution list (not an address list). Add the created room to room list for easy management.

Choose one of the following options from the drop-down list to determine how to set the room list:
- Allow business users to configure this field – You can specify the room list. Business users can edit the room list in the request form.
- Require business users to configure this field – Business users are required to configure the room list in the request form.
- Show this field as read-only to business users – The room list will be displayed to business users as read-only.
- Hide this field from business users – The room list will not be displayed to business users.
Room mailbox alias – The alias specifies the Exchange alias (also known as the mail nickname) for the recipient. This value identifies the recipient as a mail-enabled object and shouldn't be confused with multiple email addresses for the same recipient (also known as proxy addresses). If an alias is not provided, then it will be the same as the username specified in the email address field.

Choose one of the following options from the drop-down list to determine how to set the room mailbox members:
- Allow business users to configure this field – Business users can choose whether to specify the room mailbox alias in the request form.
- Require business users to configure this field – Business users are required to specify the room mailbox alias in the request form.
Room place – Configure the place information for the created room mailbox, which is displayed in the room finder and helps users to find a suitable meeting room for their use. Configure the following settings:
- Building
- Floor
- Floor label
Choose one of the following options from the drop-down list to determine how to configure the room place settings:
- Allow business users to configure this field – Business users can configure the room place settings in the request form.
- Require business users to configure this field – Business users are required to configure the room place settings in the request form.
- Show this field as read-only to business users – You configure the room place settings in the request from and they will be displayed to business users as read-only.
- Hide this field from business users – You configure the room place settings in the request form and they will not be displayed to business users.
Send as – Add the delegates who will have the Send as permission to send emails from the room mailbox. Messages will appear to have been sent from the mailbox owner.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send as permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send as – Enter the names of users, distribution groups, or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send as permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send as permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send as – Predefined delegates that you selected here will be the default delegates with the Send as permission. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
Send on behalf – Add the delegates who will have the Send on behalf permission to send emails on behalf of the room mailbox.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send on behalf permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send on behalf – Enter the names of users, distribution groups, or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send on behalf permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send on behalf permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send on behalf – Predefined delegates that you selected here will be the default delegates with the Send on behalf permission. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.

Create Private Channel Service

A Create private channel service allows you to define the private channel provisioning service request template for your business users. You can customize the settings for private channels created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create private channel service, and they are required to be configured:

Scope – Choose to define the scope or inherit the scope from a previous service.
- Define scope – Define the service scope for teams where private channels can be created via requests for this service. The service scope can be a Microsoft tenant or specific containers.
  - Select a tenant as the scope – Business users can submit requests for this service to create private channels for teams in the selected tenant.
    
    Your Microsoft 365 tenant is displayed here when your tenant has a Microsoft Entra ID or Cloud Governance for Microsoft 365 app profile configured in AvePoint Online Services.
  - Select containers as the scope – Business users can submit requests for this service to create private channels for teams in specific containers. Click Add to open the Select scope from tree panel, select one or more containers from the data tree, and then click Add to add the selected containers to the table.
    
    In the panel, you can also enter the keyword of a container in the search box to search for a container.
- Inherit from the previous service – If you have already added any of the following services to the flow in the previous step, you can choose this option and select the service from the drop-down list to use the scope configured for the service as the service request scope.
  - Change contact service
  - Change ownership or membership service with the Microsoft Team object type selected
  - Change team profiles service
  - Change team settings service
  - Change metadata service with the Microsoft Team object type selected
  - Create team service
Private channel name & description – Choose to let your business users manually enter private channel names in the request form or you set construction rules for the private channel names.
- Construct private channel name – If you leave the checkbox deselected, business users can specify private channel names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the private channel name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the private channel name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build private channel names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for private channel names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build private channel names. This field will be displayed to business users as read-only.
- Private channel description – Enter a description for the private channel.
  
  Choose one of the following options from the drop-down list to determine how to set the private channel description:
  - Allow business users to configure this field – You can enter a private channel description. Business users can edit the private channel description in the request form.
  - Require business users to configure this field – Business users are required to configure the private channel description in the request form.
  - Show this field as read-only to business users – The private channel description will be displayed to business users as read-only.
  - Hide this field from business users – The private channel description will not be displayed to business users.
Private channel owners – Add one or more Microsoft 365 users as the owners of the new private channels created via the service request.

Note that private mailboxes or resource mailboxes are not supported.
- Private channel owners – Enter the names of Microsoft 365 users as the private channel owners, or enter $ to select from available roles, and the user who takes the role will be the private channel owner. Choose one of the following options from the drop-down list to determine how to set the private channel owners:
  - Require business users to configure this field – Business users are required to select the private channel owners in the request form.
  - Show this field as read-only to business users – You select the private channel owners, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the private channel owners, and they will not be displayed to business users.
- Predefined private channel owners – Predefined private channel owners that you selected here will be the default private channel owners. Enter the names of Microsoft 365 users as the predefined private channel owners, or enter $ to select from available roles, and the user who takes the role will be the predefined group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Show this field as read-only to business users – The predefined group owners will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group owners will not be displayed to business users.
Private channel members – Add one or more Microsoft 365 users as members of the new private channels created via the service request. Members of groups will be added into the channel rather than the whole group. Note that private mailboxes or resource mailboxes are not supported.
- Private channel members – Enter the names of Microsoft 365 users as the private channel members, or enter $ to select from available roles, and the user who takes the role will be the private channel member. Choose one of the following options from the drop-down list to determine how to set the private channel members:
  - Allow business users to configure this field – Business users are allowed to select the private channel members in the request form.
  - Require business users to configure this field – Business users are required to select the private channel members in the request form.
  - Show this field as read-only to business users – You select the private channel members, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the private channel members, and they will not be displayed to business users.
- Predefined private channel members – Predefined private channel members that you selected here will be the default private channel members. Enter the names of Microsoft 365 users as the predefined private channel members, or enter $ to select from available roles, and the user who takes the role will be the predefined private channel member. Choose one of the following options from the drop-down list to determine how to set the private channel members:
  - Show this field as read-only to business users – The predefined private channel members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined private channel members will not be displayed to business users.

Create Shared Channel Service

A Create shared channel service allows you to define the shared channel provisioning service request template for your business users. You can customize the settings for shared channels created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create shared channel service, and they are required to be configured:

Scope – Choose to define the scope or inherit the scope from a previous service.
- Define scope – Define the service scope for teams where shared channels can be created via requests for this service. The service scope can be a Microsoft tenant or specific containers.
  - Select a tenant as the scope – Business users can submit requests for this service to create shared channels for teams in the selected tenant.
    
    Your Microsoft 365 tenant is displayed here when your tenant has a Microsoft Entra ID or Cloud Governance for Microsoft 365 app profile configured in AvePoint Online Services.
  - Select containers as the scope – Business users can submit requests for this service to create shared channels for teams in specific containers. Click Add to open the Select scope from tree panel, select one or more containers from the data tree, and then click Add to add the selected containers to the table.
    
    In the panel, you can also enter the keyword of a container in the search box to search for a container.
- Inherit from the previous service – If you have already added any of the following services to the flow in the previous step, you can choose this option and select the service from the drop-down list to use the scope configured for the service as the service request scope.
  - Change contact service
  - Change ownership or membership service with the Microsoft Team object type selected
  - Change team profiles service
  - Change team settings service
  - Convert Microsoft 365 Group to team service
  - Create team service
Shared channel name & description – Choose to let your business users manually enter shared channel names in the request form or you set construction rules for the shared channel names.
- Construct shared channel name – If you leave the checkbox deselected, business users can specify shared channel names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the shared channel name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the shared channel name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build shared channel names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for shared channel names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build shared channel names. This field will be displayed to business users as read-only.
- Shared channel description – Enter a description for the shared channel.
  
  Choose one of the following options from the drop-down list to determine how to set the shared channel description:
  - Allow business users to configure this field – You can enter a shared channel description. Business users can edit the shared channel description in the request form.
  - Require business users to configure this field – Business users are required to configure the shared channel description in the request form.
  - Show this field as read-only to business users – The shared channel description will be displayed to business users as read-only.
  - Hide this field from business users – The shared channel description will not be displayed to business users.
Shared channel owners – Add one or more Microsoft 365 users, Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups as the owners of the new shared channels created via the service request. The members of groups will be added into channel rather than the whole group.

Note that shared mailboxes or resource mailboxes are not supported, and it requires at least one team owner as the shared channel owner in the service request to ensure shared channels can be created.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as shared channel owners in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Shared channel owners – Enter the names of Microsoft 365 users, Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups as the shared channel owners, or enter $ to select the $Team owner role, and the user who takes the role will be the shared channel owner. Choose one of the following options from the drop-down list to determine how to set the shared channel owners:
  - Require business users to configure this field – Business users are required to select the shared channel owners in the request form.
  - Show this field as read-only to business users – You select the shared channel owners, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the shared channel owners, and they will not be displayed to business users.
- Predefined shared channel owners – Predefined shared channel owners that you selected here will be the default shared channel owners. Enter the names of Microsoft 365 users, Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups as the predefined shared channel owners, or enter $ to select the $Team owner role, and the user who takes the role will be the predefined group owner. Choose one of the following options from the drop-down list to determine how to set the group owners:
  - Show this field as read-only to business users – The predefined group owners will be displayed to business users as read-only.
  - Hide this field from business users – The predefined group owners will not be displayed to business users.
Shared channel members – Add one or more Microsoft 365 users, Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups as members of the new shared channels created via the service request. Members of groups will be added into channel rather than the whole group. Note that shared mailboxes or resource mailboxes are not supported.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as shared channel members in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Shared channel members – Enter the names of Microsoft 365 users, Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups as the shared channel members, or enter $ to select the $Team owner role, and the user who takes the role will be the shared channel member. Choose one of the following options from the drop-down list to determine how to set the shared channel members:
  - Require business users to configure this field – Business users are required to select the shared channel members in the request form.
  - Show this field as read-only to business users – You select the shared channel members, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the shared channel members, and they will not be displayed to business users.
- Predefined shared channel members – Predefined shared channel members that you selected here will be the default shared channel members. Enter the names of Microsoft 365 users, Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups as the predefined shared channel members, or enter $ to select the $Team owner role, and the user who takes the role will be the predefined shared channel member. Choose one of the following options from the drop-down list to determine how to set the shared channel members:
  - Show this field as read-only to business users – The predefined shared channel members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined shared channel members will not be displayed to business users.

Create Shared Mailbox Service

A Create shared mailbox service allows you to define the shared mailbox provisioning service request template for your business users. You can customize the settings for shared mailboxes created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create shared mailbox service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New shared mailboxes created via the service request will reside in the chosen tenant.

To select your tenant here, make sure an app profile for Cloud Governance for Exchange service app has been created in AvePoint Online Services. If your tenant uses the custom app, make sure you add the Exchange.ManageAsApp permission to the custom Azure app, assign the Exchange Administrator role to the app, and re-authorize the app.
Multi-Geo locations – This section appears only when your Microsoft 365 tenant has the Multi-Geo Capabilities in Microsoft 365 service plan. By default, new shared mailboxes will be created in your tenant’s central location. The central location is the geo location where your tenant was originally provisioned.

To enable shared mailbox provisioning in multi-geo locations, choose one of the following options and configure the corresponding settings:
- Select specific geo locations – If you allow shared mailbox data to be stored in different geo locations, select geo locations to set the scope, and your business users will choose geo locations from the scope.
  
  Click Add to open the Region panel, select one or more geo locations in the panel, and then click Add to add them to the table.
  
  If you add more than one geo location, select a default location from the Default geo location drop-down list.
  
  Choose one of the following options to determine how to set the geo locations:
  - Require business users to configure this field – Business users are required to select the geo location in the request form.
  - Show this field as read-only to business users – You select the geo location and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the geo location and it will not be displayed to business users.
- Use the preferred data location of the selected user role to determine the geo location – If you do not allow your business users to choose geo locations, you can choose to retrieve the preferred data location (PDL) of the requester or primary shared mailbox contact as the geo location. Select the $Requester or $Primary contact role from the drop-down list.
  
  NOTE
  If the requester or primary shared mailbox contact does not have the PDL property, the shared mailbox will be created in your tenant’s central location.
Shared mailbox name – Choose to let your business users manually enter shared mailbox name in the request form, or you set construction rules for the names, and decide whether requesters can use a shared mailbox name that is already in use.
- Construct shared mailbox name – If you leave the checkbox deselected, business users can specify shared mailbox names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the shared mailbox name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build shared mailbox names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for shared mailbox names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build shared mailbox names. This field will be displayed to business users as read-only.
- Do not allow duplicate shared mailbox names – With the checkbox selected, business users who submit the request via this service will not be allowed to create a shared mailbox with a name that is already in use.
Shared mailbox email address – Choose to let your business users manually enter the shared mailbox email address in the request form, or you set construction rules for the shared mailbox email address.
- Manually select domain list – Select the domain for the shared mailbox email address. Then, select a domain from the drop-down list as the Default domain.
  
  Choose one of the following options from the drop-down list to determine how to set the shared mailbox email address:
  - Require business users to configure this field – This setting is required to be configured in a request form. The domain you set here will be displayed to business users as available options.
  - Show this field as read-only to business users – The domain you set here will be displayed to business users as read-only.
  - Hide this field from business users – The domain will not be displayed to business users.
- Retrieve domain list from a Lookup metadata – With the option selected, select a Lookup metadata from the drop-down list to retrieve the domain.
  
  Choose one of the following options from the drop-down list to determine how to set the shared mailbox email address:
  - Require business users to configure this field – Business users are required to select a Lookup metadata in the request form.
  - Show this field as read-only to business users – You select the Lookup metadata and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the Lookup metadata and they will not be displayed to business users.
- Construct email address – If you leave the checkbox deselected, business users can specify shared mailbox email address in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the shared mailbox email address, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or Group, Managed metadata, or Microsoft Entra Property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the shared mailbox email address:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build the shared mailbox email address.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for shared mailbox email address.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build the shared mailbox email address. This field will be displayed to business users as read-only.
Shared mailbox contact – Select the primary contact and/or secondary contact for the new shared mailboxes created via the service request.
- Primary contact – The primary contact will be responsible for managing the new shared mailboxes.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
  - Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary shared mailbox contact in the request form.
    - Show this field as read-only to business users – You select the primary shared mailbox contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary shared mailbox contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when shared mailbox provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new shared mailboxes when the primary contact is unavailable.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
  - Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Require business users to configure this field – Business users are required to select the secondary shared mailbox contact in the request form.
    - Show this field as read-only to business users – You select the secondary shared mailbox contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary shared mailbox contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when shared mailbox provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.

Apart from the default settings, you can click the add button to add any of the following settings to a Create shared mailbox group service based on your requirement, and then complete the configurations:

Automapping setting – Choose whether to enable automapping for the shared mailbox in Cloud Governance database. If you select the Enable automapping for the shared mailbox (managed by Cloud Governance) option, Outlook will automatically detect shared mailboxes that the user has full access to and configure its profile accordingly to display the mailboxes in Outlook. Any users added through Cloud Governance, whether through a Change shared mailbox permissions service request or during the renewal process, will follow this global setting.

Choose one of the following options from the drop-down list to determine how to set the Automapping setting:
- Allow business users to configure this field – Business users can choose whether to enable automapping for the shared mailbox in the request form.
- Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
- Hide this field from business users – Your configuration here will not be displayed to business users.
Automatic replies – Choose whether to enable automatic replies (out of office) for the shared mailbox.
- Enable automatic replies – Select this option to enable automatic replies for the shared mailbox.
  
  Choose one of the following options from the drop-down list to determine how to set the automatic reply setting:
  - Allow business users to configure this field – Business users can choose whether to enable auto replies for the shared mailbox in the request form.
  - Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
  - Hide this field from business users – Your configuration here will not be displayed to business users.
- Allow requesters to specify the time period to send replies – Choose whether to allow requesters to specify the time period to send replies.
- Send automatic replies to senders inside the organization from this mailbox – Enter the message for automatically replying to senders inside the organization from this mailbox.
  
  Choose one of the following options from the drop-down list to determine how to configure the setting:
  - Allow business users to configure this field – You can enter an automatic reply message. Business users can edit the message in the request form.
  - Require business users to configure this field – Business users are required to configure the automatic reply message in the request form.
  - Show this field as read-only to business users – The automatic reply message will be displayed to business users as read-only.
  - Hide this field from business users – The automatic reply message will not be displayed to business users.
- Send automatic replies to senders outside the organization – Configure whether to send automatic replies to senders outside the organization by selecting one of the following options:
  - Send replies only to senders in this mailbox's shared contact list
  - Send replies to all external senders
  Choose one of the following options from the drop-down list to determine how to configure the setting:
  - Allow business users to configure this field – Business users can choose whether to send automatic replies to senders outside the organization in the request form.
  - Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
  - Hide this field from business users – Your configuration here will not be displayed to business users.
- Reply to all senders outside the organization from this mailbox – Enter the message for automatically replying to all senders outside the organization from this mailbox.
  
  Choose one of the following options from the drop-down list to determine how to configure the setting:
  - Allow business users to configure this field – You can enter an automatic reply message. Business users can edit the message in the request form.
  - Require business users to configure this field – Business users are required to configure the automatic reply message in the request form.
  - Show this field as read-only to business users – The automatic reply message will be displayed to business users as read-only.
  - Hide this field from business users – The automatic reply message will not be displayed to business users.
Email forwarding – Choose whether to forward all emails sent to the shared mailbox to another recipient.
- Forward all emails sent to this shared mailbox – Configure where all emails sent to this shared mailbox will be forwarded by selecting one of the following options:
  - Forward to an internal email address – Specify the internal email address to forward to.
  - Forward to an external email address – Specify the external email address to forward to.
  Choose one of the following options from the drop-down list to determine how to configure the setting:
  - Allow business users to configure this field – Business users can configure whether to forward all emails sent to this shared mailbox in the request form.
  - Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
  - Hide this field from business users – Your configuration here will not be displayed to business users.
- People picker filter profile – Select a people picker filter profile from the drop-down list to limit the forwarding email addresses in the service request in the Cloud Governance Portal. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles.
  
  To retrieve the latest people picker filter profiles that are available, you can click the refresh button.
- Deliver messages to both forwarding address and mailbox – choose whether to deliver messages to both forwarding address and mailbox.
  
  Choose one of the following options from the drop-down list to determine how to configure the setting:
  - Allow business users to configure this field – Business users can choose whether to deliver messages to both forwarding address and mailbox in the request form.
  - Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
  - Hide this field from business users – Your configuration here will not be displayed to business users.
Exchange global address list – Choose whether to hide new shared mailboxes created via the service request from the Exchange global address list by selecting Yes or No.

Choose one of the following options from the drop-down list to determine how to set the Exchange global address list setting:
- Allow business users to configure this field – Business users can choose whether to hide new shared mailboxes created via service request from the Exchange global address list.
- Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
- Hide this field from business users – Your configuration here will not be displayed to business users.
Regional settings – Configure regional settings for the shared mailbox, or let your business users configure these in the request form.
- Click Add to open the Add language panel, select one or more languages in the panel, and then click Add to add them to the table.
  
  If you add more than one language, select a default language from the Default language drop-down list.
  
  Choose one of the following options to determine how to set the languages:
  - Require business users to configure this field – Business users are required to select the language in the request form.
  - Show this field as read-only to business users – You select the default language and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the default language and it will not be displayed to business users.
- To configure the date format and time format for added languages, click the Edit button of an added language to open the Edit language panel.
  - Date format – Select one or multiple formats in the format list. If you selected more than one format, select a default date format from the Default date format drop-down list.
    
    Choose one of the following options to determine how to set the date formats:
    - Require business users to configure this field – Business users are required to select the date format in the request form.
    - Show this field as read-only to business users – You select the default date format and it will be displayed to business users as read-only.
    - Hide this field from business users – You select the default date format and it will not be displayed to business users.
  - Time format – Select one or multiple formats in the format list. If you selected more than one format, select a default time format from the Default time format drop-down list.
    
    Choose one of the following options to determine how to set the time formats:
    - Require business users to configure this field – Business users are required to select the time format in the request form.
    - Show this field as read-only to business users – You select the default time format and it will be displayed to business users as read-only.
    - Hide this field from business users – You select the default time format and it will not be displayed to business users.
- Localize the default folder names for the shared mailbox in the specified language – Choose whether to localize the default folder names for the shared mailbox in the specified language.
  
  Choose one of the following options from the drop-down list to determine how to set the default folder localization:
  - Allow business users to configure this field – Business users can choose whether to localize the default folder names for the shared mailbox in the specified language in the request form.
  - Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
  - Hide this field from business users – Your configuration here will not be displayed to business users.
Send as – Add the delegates who will have the Send as permission to send emails from the shared mailbox. A message will appear to have been sent from the mailbox owner.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send as permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send as – Enter the names of users or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send as permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send as permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send as – Predefined delegates that you selected here will be the default delegates with the Send as permission. Enter the names of users or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
Send on behalf – Add the delegates who will have the Send on behalf permission to send emails on behalf of the shared mailbox.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as delegates with the Send on behalf permission in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Send on behalf – Enter the names of users, distribution groups, or mail-enabled security groups as the delegates, or enter $ to select from available roles, and the user who takes the role will be the delegate with the Send on behalf permission. Choose one of the following options from the drop-down list to determine how to set the delegates with the Send on behalf permission:
  - Allow business users to configure this field – You can select the delegates. Business users can choose whether to edit or assign the delegates in the request form.
  - Require business users to configure this field – Business users are required to select the delegates in the request form.
  - Show this field as read-only to business users – You select the delegates and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the delegates and they will not be displayed to business users.
- Predefined send on behalf – Predefined delegates that you selected here will be the default delegates with the Send on behalf permission. Enter the names of users, distribution groups, or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
Sent items – Choose whether to copy items sent as or sent on behalf of this shared mailbox to the shared mailbox's Sent Items folder. Shared mailbox members will see emails sent by other shared mailbox members.
- Copy items sent as this mailbox – Choose whether to copy items sent as this mailbox.
  
  Choose one of the following options from the drop-down list to determine how to configure the setting:
  - Allow business users to configure this field – Business users can choose whether to copy items sent to this mailbox in the request form.
  - Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
  - Hide this field from business users – Your configuration here will not be displayed to business users.
- Copy items sent on behalf of this mailbox – Choose whether to copy items sent on behalf of this mailbox.
  
  Choose one of the following options from the drop-down list to determine how to configure the setting:
  - Allow business users to configure this field – Business users can choose whether to copy items sent on behalf of this mailbox in the request form.
  - Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
  - Hide this field from business users – Your configuration here will not be displayed to business users.
Shared mailbox alias – The alias specifies the Exchange alias (also known as the mail nickname) for the recipient. This value identifies the recipient as a mail-enabled object and shouldn't be confused with multiple email addresses for the same recipient (also known as proxy addresses). If an alias is not provided, then it will be the same as the username specified in the email address field.

Choose one of the following options from the drop-down list to determine how to set the shared mailbox members:
- Allow business users to configure this field – Business users can choose whether to specify the shared mailbox alias in the request form.
- Require business users to configure this field – Business users are required to specify the shared mailbox alias in the request form.
Shared mailbox contact election – Use the shared mailbox contact election profile to automate the shared mailbox contact election process, which will be triggered to determine the proper contacts when the primary or secondary shared mailbox contact is invalid.

Select a shared mailbox contact election profile for new mailboxes. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new shared mailbox contact election profile in the Create shared mailbox contact election profile panel. For detailed instructions, refer to Configure Shared Mailbox Contact Election Profiles.

Choose one of the following options from the drop-down list to determine how to set the shared mailbox contact election process:
- Require business users to configure this field – Business users are required to select a shared mailbox contact election profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the shared mailbox contact election profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the shared mailbox contact election profile here and it will not be displayed to business users.
Read and manage (full access) – Add users or user roles as members with full access permissions for new shared mailboxes created via the service request.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as shared mailbox members in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Shared mailbox members – Enter the names of users or mail-enabled security groups, or enter $ to select from available roles, and the user who takes the role will be the shared mailbox member. Choose one of the following options from the drop-down list to determine how to set the shared mailbox members:
  - Allow business users to configure this field – You can select the shared mailbox members. Business users can choose whether to edit or assign the shared mailbox members in the request form.
  - Require business users to configure this field – Business users are required to select the shared mailbox members in the request form.
  - Show this field as read-only to business users – You select the shared mailbox members and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the shared mailbox members and they will not be displayed to business users.
- Predefined read and manage (full access) – Predefined shared mailbox members with full access permissions that you selected here will be the shared mailbox members. Enter the names of users or mail-enabled security groups as the predefined shared mailbox members with full access permissions, or enter $ to select from available roles, and the user who takes the role will be the predefined shared mailbox member with full access permissions.
  
  Choose one of the following options from the drop-down list to determine how to set the shared mailbox members with full access permissions:
  - Show this field as read-only to business users – The predefined shared mailbox members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined shared mailbox members will not be displayed to business users.
Shared mailbox permissions – Add permissions to the users for the shared mailbox and configure the settings for the permissions, including adding and removing users, and managing their permissions.

NOTE
With this setting added to the service, the following settings will no longer be available: Read and manage (full access), Send as, and Send on behalf.

Click Add to open the Create permission panel, and configure the following settings:
- Permission name – Enter the name of the permission.
- Description to requester – Select languages and customize the content for the description shown to the requesters. Click the edit button of your desired languages to open the Edit description panel, enter your desired description in the text box. Then click Save when you finish the configuration
- Grant permissions – Select the permissions to grant multiple access levels to shared mailbox members from the following options:
  - Read and manage (full access)
  - Send as
  - Send on behalf
  - Read-only
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Predefined users – Predefined delegates that you selected here will be the default delegates with the granted permissions. Enter the names of users or mail-enabled security groups as the predefined delegates, or enter $ to select from available roles, and the user who takes the role will be the predefined delegate. Choose one of the following options from the drop-down list to determine how to set the delegates:
  - Show this field as read-only to business users – The predefined delegates will be displayed to business users as read-only.
  - Hide this field from business users – The predefined delegates will not be displayed to business users.
  When you finish, click Save to save all your configurations.
Shared mailbox policies – Specify policies for the shared mailbox.
- Sharing policy – Specify a sharing policy for the shared mailbox.
  
  Click Add to open the Add sharing policy panel, select one or more policies in the panel, and then click Add to add them to the table.
  
  If you add more than one sharing policies, select a default policy from the Default policy drop-down list.
  
  Choose one of the following options to determine how to set the sharing policies:
  - Require business users to configure this field – Business users are required to select the sharing policy in the request form.
  - Show this field as read-only to business users – You select the default sharing policy and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the default sharing policy and it will not be displayed to business users.
- Role assignment policy – Specify a role assignment policy for the shared mailbox.
  
  Click Add to open the Add role assignment policy panel, select one or more policies in the panel, and then click Add to add them to the table.
  
  If you add more than one role assignment policies, select a default policy from the Default policy drop-down list.
  
  Choose one of the following options to determine how to set the role assignment policies:
  - Require business users to configure this field – Business users are required to select the role assignment policy in the request form.
  - Show this field as read-only to business users – You select the default role assignment policy and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the default role assignment policy and it will not be displayed to business users.
- Retention policy – Specify a retention policy for the shared mailbox.
  
  Click Add to open the Add retention policy panel, select one or more policies in the panel, and then click Add to add them to the table.
  
  If you add more than one retention policies, select a default policy from the Default policy drop-down list.
  
  Choose one of the following options to determine how to set the retention policies:
  - Require business users to configure this field – Business users are required to select the retention policy in the request form.
  - Show this field as read-only to business users – You select the default retention policy and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the default retention policy and it will not be displayed to business users.
- Address book policy – Specify an address book policy for the shared mailbox.
  
  Click Add to open the Add address book policy panel, select one or more policies in the panel, and then click Add to add them to the table.
  
  If you add more than one address book policies, select a default policy from the Default policy drop-down list.
  
  Choose one of the following options to determine how to set the address book policies:
  - Require business users to configure this field – Business users are required to select the address book policy in the request form.
  - Show this field as read-only to business users – You select the default address book policy and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the default address book policy and it will not be displayed to business users.
Shared mailbox renewal – Use a shared mailbox renewal profile to determine the renewal schedule and governance details that must be confirmed when a shared mailbox goes through the renewal process.

Select a shared mailbox renewal profile for new mailboxes. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new shared mailbox renewal profile in the Create shared mailbox renewal profile panel. For detailed instructions, refer to Configure Shared Mailbox Renewal Profiles.

Choose one of the following options from the drop-down list to determine how to set the site collection renewal process:
- Require business users to configure this field – Business users are required to select a shared mailbox renewal profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the shared mailbox renewal profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the shared mailbox renewal profile here and it will not be displayed to business users.
Time zone – Specify the time zone for the shared mailbox. Select a time zone from the Time zone drop-down list.

Choose one of the following options from the drop-down list to determine how to set the time zone:
- Require business users to configure this field – Business users are required to select a time zone in the request form.
- Show this field as read-only to business users – You select the time zone here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the time zone here and it will not be displayed to business users.

Create Site Collection Service

A Create site collection service allows you to define the site collection provisioning service request template for your business users. You can customize the settings for site collections created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create site collection service, and they are required to be configured:

Admin center and managed path – Select a SharePoint Online admin center and associated managed path where you wish to create a site collection.

NOTE
All site collections newly created via Cloud Governance service requests will be registered into both AvePoint Online Services containers based on AvePoint Online Services scan rules and AvePoint Cloud Management default containers. For more details, refer to Manage Scan Profiles. The service account used by the scan profile in AvePoint Online Services will be added as the site collection administrator.

Choose one of the following options from the drop-down list to determine how to set the site collection admin center and managed path:
- Require business users to configure this field – The admin center and the managed path will be automatically filled into the text box, and business users can change the managed path.
- Show this field as read-only to business users – The admin center and the managed path will be displayed as read-only, and business users cannot change the managed path.
Multi-Geo locations – This section appears only when your Microsoft 365 tenant has the Multi-Geo Capabilities in Microsoft 365 service plan. By default, new site collections will be created in your tenant’s central location. The central location is the geo location where your tenant was originally provisioned.

To enable site collection provisioning in multi-geo locations, choose one of the following options and configure the corresponding settings:
- Select specific geo locations – If you allow site collection data to be stored in different geo locations, select geo locations to set the scope, and your business users will choose geo locations from the scope.
  
  Click Add to open the Region panel, select one or more geo locations in the panel, and then click Add to add them to the table.
  
  If you add more than one geo location, select a default location from the Default geo location drop-down list.
  
  Choose one of the following options to determine how to set the geo locations:
  - Require business users to configure this field – Business users are required to select the geo location in the request form.
  - Show this field as read-only to business users – You select the geo location and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the geo location and it will not be displayed to business users.
- Use the preferred data location of the selected user role to determine the geo location – If you do not allow your business users to choose geo locations, you can choose to retrieve the preferred data location (PDL) of the requester or primary site collection contact as the geo location. Select the $Requester or $Primary contact role from the drop-down list.
  
  NOTE
  If the requester or primary site collection contact does not have the PDL property, the site collection will be created in your tenant’s central location.
Site collection title & description – Choose to let your business users manually enter the site collection title or you set construction rules for the site collection title.
- Construct site collection title – If you leave the checkbox unselected, business users can specify site collection titles in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the site collection title, select Text, Attribute, or Metadata from the drop-down list as a rule type, and then define the value for the selected rule.
- Do not allow duplicate site collection titles – Define whether to allow duplicate site collection titles. When enabled, it prevents the creation of multiple site collections that would have the same title.
- Site collection description – Enter a description for the site collection.
Choose one of the following options from the drop-down list to determine how to set the site collection title and site collection description:
- Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build site collection titles.
- Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for site collection titles.
- Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build site collection titles. This field will be displayed to business users as read-only.
- Hide this field from business users – The prefixes/suffixes you set here will be used to build site collection titles. This field will not be displayed to business users.

Site collection URL construction – Choose a method to define the site collection URL.

Manually enter URL – Allow business users to manually enter the site collection URL.
- Construct URL – If you leave the checkbox deselected, business users can specify the site collection URL in the request form. With the checkbox selected, click Add to add a construction rule, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  Sequence number – You can also define the suffix using the sequence number in the format of {nn} or *{nn}**:
  
  {01} – The suffix in the site collection URL will increase from 01 to 99 in numerical value.
  
  {01}* – The suffix in the site collection URL will increase from 01 to 999999999 in numerical value.
  
  Specify the connection character for connecting the values of multiple rules. – If you add multiple rules, you can enter one or more connection characters for connecting the values of those rules. If you choose not to define a connection character, the rule values will be connected by spaces.
  
  Choose one of the following options from the drop-down list to determine how to construct the site collection URL:
  - Require business users to configure this field – The URL rules configured here will be used to generate the URL of the site collection created via this service. In the request form, the generated site collection URL will be displayed to business users as the default URL, and business users are required to enter the site collection URL name.
  - Show this field as read-only to business users – The URL rules configured here will be used to generate the URL of the site collection created via this service. The generated site collection URL will be displayed to business users as read-only in the request form.
- URL validation – Select the checkbox to enable site collection URL validation. Then, select a text validation rule from the drop-down list. The site collection URL defined by the requester will be validated according to the regular expression set in the text validation rule.

Automatically generate URL – Allows AvePoint Cloud Governance to automatically generate the site collection URL. Choose one of the following methods:

Sequential numbering – Define the prefix, delimiter, and sequence number. Refer to the following examples:

Prefix	Sequence Number	Note
abc{d}		abc will be used fixedly as a part of the site collection URL prefix. The part {d} will increase in alphabetical order from d to z.
	{01}	The sequence number in the site collection URL will increase from 01 to 99 in numerical value.
Abc	{01}	abc will be used as the site collection URL prefix. The sequence number in the site collection URL will increase from 01 to 99 in numerical value.
Abc	{01*}	The sequence number in the site collection URL will increase from 01 to 999999999 in numerical value.
{abc}	{01}	After the sequence number increases to 99, the prefix will increase to abd, and the sequence number will be initialized to 00.
{abcz}	{01}	After the sequence number increases to 99, the prefix will increase to abdz, and the sequence number will be initialized to 00.

Random string – Choose this method to automatically generate a site collection URL by randomly adding letters and numbers.

Define the Minimum length of the URL name and the Maximum length of the URL name. You can also enter a prefix, and the URL name will be prefix + random string.

A site collection URL is in the following format: https://domainname/managed path/prefix + random string

For example, https://contoso.sharepoint.com/sites/us_kb824. Here us_ is the prefix, and kb824 is the random string.

When you define the maximum and minimum length of the URL name, note that the length of a site collection URL cannot exceed 136 characters.

Classification – Select one or more classifications that you wish to apply to new site collections created via this service request. If you select more than one classification, select a default classification from the Default classification drop-down list, and this is not required if you choose to Require business users to configure this field.

Choose one of the following options from the drop-down list to determine how to set the classification:
- Require business users to configure this field – Business users are required to select a classification in the request form.
- Show this field as read-only to business users – The default classification will be applied to new site collections, and it will be displayed to business users as read-only.
- Hide this field from business users – The default classification will be applied to new site collections, and it will not be displayed to business users.
NOTE
Once the integration with sensitivity labels is enabled in your tenant, the Classification section will be hidden and no longer require configuration.
Sensitivity label – Select one or more sensitivity labels that you wish to apply to new site collections created via this service request. If you select more than one sensitivity label, select a default sensitivity label from the Default sensitivity label drop-down list.

Choose one of the following options from the drop-down list to determine how to set the sensitivity label:
- Require business users to configure this field – Business users are required to select a sensitivity label in the request form.
- Show this field as read-only to business users – The default sensitivity label will be applied to new site collections, and it will be displayed to business users as read-only.
- Hide this field from business users – The default sensitivity label will be applied to new site collections, and it will not be displayed to business users.
NOTE
Make sure that your tenant has already created and published the sensitivity labels in Microsoft 365. To allow Cloud Governance to retrieve external sharing settings of label, configure the Cloud Governance for Exchange app and assign it the Compliance Administrator role. Without the configurations, an error task will be generated when configurations in the service requests conflict with the applied sensitivity label settings.
Site type – To add an additional site type to use for site collections created via the service request, complete the following steps:
1. Click Add to open the Add site type panel.
2. In the Add site type panel, choose to use built-in site types or customized site types by choosing one of the following options:
  - Select from built-in types – Select one or more built-in site types and then click Add to list to add them as available templates.
  - Retrieve custom site types from an external data source – If you want to use customized site types, configure the following settings.
    - Get custom site types from a library – Enter the URL of the SharePoint Online library where the custom template files are stored.
    - Get site type name from the following column – Select a column whose values are the custom site type names.
    When you finish, click Retrieve to retrieve available site types from your specified library. Then, you can see the site type displayed in the table below.
    
    A custom site type refers to a tailored site template that extends or modifies SharePoint's default site templates. For detailed information on how to save a site as custom template, refer to Save, download, and upload a SharePoint site as a template.
If you add more than one site type, select a default site type from the Default type drop-down list.

NOTE
If a specified site type does not exist for the selected language, this type will not be loaded in the request.

Choose one of the following options from the drop-down list to determine how to set the site types:
- Require business users to configure this field – Business users are required to select a site type in the request form.
- Show this field as read-only to business users – The default site type will be applied to new site collections, and it will be displayed to business users as read-only.
- Hide this field from business users – The default site type will be applied to new site collections and it will not be displayed to business users.
If the Retrieve custom site types from an external data source option is selected while adding site types, choose whether to Delete the solution file after site collection creation.
Site collection contact – Select the primary contact and/or secondary contact for the new site collections created via the service request.
- Primary contact – The primary contact will be responsible for managing the new site collections.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
  - Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary site collection contact in the request form.
    - Show this field as read-only to business users – You select the primary site collection contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary site collection contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when site collection provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new site collections when the primary contact is unavailable.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
    
    You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
  - Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Allow business users to configure this field – You can select the secondary site collection contact. Business users can choose whether to edit, remove, or assign the secondary site collection contact in the request form.
    - Require business users to configure this field – Business users are required to select the secondary site collection contact in the request form.
    - Show this field as read-only to business users – You select the secondary site collection contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary site collection contact and they will not be displayed to business users.
- Choose whether to Notify the contact when site collection provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
Site collection administrator – Select administrators for new site collections created via the service request.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Primary administrator – Enter the name of a user as the primary administrator, or enter $ to select from available roles, and the user who takes the role will be the primary administrator.
  
  NOTE
  The user specified as the primary administrator will be automatically added as one of the site collection administrators.
  
  Choose one of the following options from the drop-down list to determine how to set the primary administrator:
  - Require business users to configure this field – Business users are required to select the primary administrator in the request form.
  - Show this field as read-only to business users – You select the primary administrator, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the primary administrator, and they will not be displayed to business users.
- Choose whether to Add primary administrator to the site collection owners group. If you select this checkbox, the specified primary administrator will be added to the site collection owners group by default.
- Site collection administrators – Enter the names of users as the site collection administrators, or enter $ to select from available roles, and the user who takes the role will be the site collection administrator.
  
  Choose one of the following options from the drop-down list to determine how to set the site collection administrators:
  - Allow business users to configure this field – You can select the site collection administrators. Business users can choose whether to edit or assign the site collection administrators in the request form.
  - Require business users to configure this field – Business users are required to select the site collection administrators in the request form.
  - Show this field as read-only to business users – You select site collection administrators, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select site collection administrators, and they will not be displayed to business users.
Site collection permissions – Configure the site collection permission settings to assign permissions for specific groups and users.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Create group – Click Create group and configure the following settings in the Create SharePoint Group panel to create a new group:
  - Name – Enter a name for the new custom group. You can enter $SiteName to automatically add the site collection title as the group name prefix.
  - Description – Enter a description for future reference.
  - Options to manage group – Choose whether to allow business users to delete the group or directly hide the group from business users by choosing one of the following options:
    - Allow business users to delete the group
    - Do not allow business users to delete the group
    - Hide the group from business users
  - SharePoint group owner – Add a Microsoft 365 user or a SharePoint Online group to be the group owner.
    - Microsoft 365 user – Enter the username of a Microsoft 365 user or enter $ to select a user role as the group owner.
    - SharePoint Online group – Select a SharePoint Online group from the drop-down list as the group owner.
    Choose one of the following options to determine how to set the group owner:
    - Require business users to configure this field – Business users are required to assign the user as a group owner in the request form.
    - Show this field as read-only to business users – You select the group owner and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the group owner and they will not be displayed to business users.
  - Who can view the membership of the group – Choose Group members or Everyone to be allowed to view the membership of the group.
    
    Choose one of the following options to determine how to set the group setting:
    - Require business users to configure this field – Business users are required to select an option for this group setting in the request form.
    - Show this field as read-only to business users – You select an option for this group setting and it will be displayed to business users as read-only.
    - Hide this field from business users – You select an option for this group setting and it will not be displayed to business users.
  - Who can edit the membership of the group – Choose Group owner or Group members to be allowed to edit the membership of the group.
    
    NOTE
    The default Members group of the site is not editable.
    
    Choose one of the following options to determine how to set the group setting:
    - Require business users to configure this field – Business users are required to select an option for this group setting in the request form.
    - Show this field as read-only to business users – You select an option for this group setting and it will be displayed to business users as read-only.
    - Hide this field from business users – You select an option for this group setting and it will not be displayed to business users.
  - SharePoint group members – Click Add user, and then enter usernames or enter $ to select user roles to add one or more users as SharePoint group members in the Add user window. When you finish adding members, click OK and add them to the table.
    
    For each user or user role added to the table, you can enforce permissions by selecting the checkbox under the Enforce permission column in the table. With the checkbox selected, the requester cannot remove the user or change the user’s permissions. Then, you can choose to hide the enforced user from the request page by selecting the checkbox under the Hide column in the table.
    
    Choose one of the following options to determine how to set the group members:
    - Allow business users to configure this field – Business users can choose whether to assign users as group members in the request form.
    - Require business users to configure this field – Business users are required to assign users as group members in the request form.
    - Show this field as read-only to business users – You select the group members and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the group members and they will not be displayed to business users.
  - SharePoint group permissions – Select one or more permission levels to configure the permissions for this group.
  - Business user permission settings – Choose whether to Allow business users to change the permission level of this group.
  When you finish, click Save to save all your configurations.
- Grant permission – To grant permissions to specific users or groups, click Grant permission and configure the following settings in the Grant permission panel:
  - Users or groups – Add users or groups that you are about to grant permissions to.
    
    Choose one of the following options to determine how to set users or groups:
    - Require business users to configure this field – Business users are required to select users or groups in the request form.
    - Show this field as read-only to business users – You select users or groups and they will be displayed to business users as read-only.
    - Hide this field from business users – You select users or groups and they will not be displayed to business users.
  - Permission levels – Select the desired permission levels that you want to grant to specified users or groups.
  When you finish, click Save to save all your configurations.
  
  Choose one of the following options to determine how to grant permissions to specific users or groups.
  - Require business users to configure this field – Business users are required to grant permissions to specific users or groups in the request form.
  - Hide this field from business users – You grant permissions to specific users or groups and they will not be displayed to business users.
- Business user action control – Choose how to control the business user actions in the request form.
  - Allow business users to grant user permissions directly – Select this checkbox to allow business users to directly grant permissions to specific users or groups in the request.
  - Prevent business users from requesting to grant permissions with the following permission levels – Select this checkbox and select your desired permission levels. The selected permission levels will not be displayed in the request.
- Welcome email
  - Send a welcome email to new users and groups – Choose whether to send a welcome email to new users and groups.
    
    Choose one of the following options to determine how to set a welcome email:
    - Require business users to configure this field – Business users are required to choose whether to send a welcome email to new users and groups in the request form.
    - Show this field as read-only to business users – You choose whether to send a welcome email to new users and groups and it will be displayed to business users as read-only.
    - Hide this field from business users – You choose whether to send a welcome email to new users and groups and it will not be displayed to business users.
  - Select an email template – Select an email template if you choose to send a welcome email to new users and groups, or you allow business users to choose whether to send a welcome email in the request form.
Language – Select the language for new site collections created via this service request. Click Add and select one or more languages in the Language panel. If you add more than one language, select a default language from the Default language drop-down list.

Choose how to set the language by choosing one of the following options:
- Require business users to configure this field – Business users are required to select the language in the request form.
- Show this field as read-only to business users – You select the language and it will be displayed to business users as read-only.
- Hide this field from business users – You select the language and it will not be displayed to business users.
Time zone – Specify the time zone for new site collections created via this service request.
- Use the default time zone specified in the SharePoint admin center – Select this option to set the default time zone for new site collections based on the geo-location settings in the SharePoint admin center.
- You can also choose to select a time zone for new site collections from the drop-down list.
Choose how to set the time zone by choosing one of the following options:
- Require business users to configure this field – Business users are required to select the time zone in the request form.
- Show this field as read-only to business users – You select the time zone and it will be displayed to business users as read-only.
- Hide this field from business users – You select the time zone and it will not be displayed to business users.

Apart from the default settings, you can click the add button to add any of the following settings to a Create site collection service based on your requirement, and then complete the configurations:

AvePoint Portal Manager template – Select AvePoint Portal Manager templates that are applicable to new site collections.

NOTE
This setting is only displayed if your organization has an available subscription for AvePoint Portal Manager.

Click Add to open the AvePoint Portal Manager template panel, select one or more templates in the panel, and then click Add to add them to the table. If you select more than one templates, select a default template from the Default template drop-down list.

Choose one of the following options to determine how to set the AvePoint Portal Manager template:
- Require business users to configure this field – Business users are required to select the AvePoint Portal Manager template in the request form.
- Show this field as read-only to business users – You select the AvePoint Portal Manager template and it will be displayed to business users as read-only.
- Hide this field from business users – You select the AvePoint Portal Manager template, and it will not be displayed to business users.
Cloud Management Deployment Manager plan – Add AvePoint Cloud Management Deployment Manager plans that are available to be applied to new site collections. The source design elements or solutions in the plan can be deployed to the site collection.

Click Add to open the Cloud Governance Deployment Manager plan panel, select one or more plans in the panel and click Add to add them to the table.

If you add more than one plan, select a default plan from the Default plan drop-down list.

Choose one of the following options to determine how to set the plan:
- Allow business users to configure this field – Business users can choose whether to select the plan in the request form.
- Require business users to configure this field – Business users are required to select a plan in the request form.
- Show this field as read-only to business users – You select the plan and it will be displayed to business users as read-only.
- Hide this field from business users – You select the plan and it will not be displayed to business users.
External sharing – Use an external sharing profile to enable unique external sharing settings for new site collections created via the service request. Site collections with the profile applied can have more restrictive settings than the global configurations in the Microsoft 365 admin center.

Select an external sharing profile for new site collections. If you select more than one profile, select a default one from the Default profile drop-down list. You can also click Create to configure a new external sharing profile in the Create site collection external sharing profile panel. For detailed instructions, refer to Configure Site Collection External Sharing Profiles.

Choose one of the following options from the drop-down list to determine how to set the external sharing settings:
- Require business users to configure this field – Business users are required to select an external sharing profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the external sharing profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the external sharing profile, and it will not be displayed to business users.
Hub site – Choose whether to register the site collection as a hub site or associate the site collection with an existing hub site and configure the corresponding settings:
- Register the site collection as a hub site – With this option selected, specify users or groups who can associate sites with the hub.
  
  Choose one of the following options to determine how to set people who can associate with the hub:
  - Allow business users to configure this field – Business users choose whether to select a hub site in the request form.
  - Require business users to configure this field – Business users are required to select users or groups in the request form.
  - Show this field as read-only to business users – You select users or groups and they will be displayed to business users as read-only.
  - Hide this field from business users – You select users or groups and they will not be displayed to business users.
- Associate the site collection with a hub site – Choose one of the following options to set the available hub site scope:
  - All existing hub sites are available for association – With this option selected, all existing hub sites in your tenant will be available for association. Select a default hub site from the Default hub site drop-down list.
    
    Choose one of the following options to determine how to set the hub site:
    - Allow business users to configure this field – You can select None or a hub site for the Default hub site. Business users can choose whether to select a hub site or not in the request form.
    - Require business users to configure this field – Business users are required to select a hub site in the request form.
    - Show this field as read-only to business users – You select a hub site and it will be displayed to business users as read-only.
    - Hide this field from business users – You select a hub site and it will not be displayed to business users.
  - Defined set of existing hub sites – You define a scope of hub sites that are available for association. Click Add to open the Add hub site panel, select one or more hub sites in the panel, and then click Save to add them to the table.
    
    If you add more than one hub site, select a default site from the Default hub site drop-down list.
    
    Choose one of the following options to determine how to set the hub site:
    - Require business users to configure this field – Business users are required to select a hub site in the request form.
    - Show this field as read-only to business users – You select a hub site and it will be displayed to business users as read-only.
    - Hide this field from business users – You select a hub site and it will not be displayed to business users.
  Choose whether to Only display hub sites that the requester has permission.
Information icon – Configure the settings for displaying the site collection information icon on the chrome bar within SharePoint Online site collections.

NOTE
This setting is applicable to classic experience team sites and has no effect on modern team sites without associated Office 365 Groups.
- Information icon image URL – Enter the information icon image URL in the text box to retrieve the image.
- Information details reference URL – Enter the information details reference URL in the text box for users to view details of the information.
Notify Opus about new files – This option is to enable the Opus webhook service to monitor special operations in SharePoint Online and trigger additional processes.
Site collection contact election – Use the site collection contact election profile to automate the site collection contact election process, which will be triggered to determine the proper contacts when the primary or secondary site collection contact is deactivated.

Select a site collection contact election profile for new site collections. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new site collection contact election profile in the Create site collection contact election profile panel. For detailed instructions, refer to Configure Site Collection Contact Election Profiles.

Choose one of the following options from the drop-down list to determine how to set the site collection contact election process:
- Require business users to configure this field – Business users are required to select a site collection contact election profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the site collection contact election profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the site collection contact election profile here and it will not be displayed to business users.
Site collection renewal – Use a site collection renewal profile to determine the renewal schedule and governance details that must be confirmed when a site collection goes through the renewal process.

Select a site collection renewal profile for new site collections. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new site collection renewal profile in the Create site collection renewal profile panel. For detailed instructions, refer to Configure Site Collection Renewal Profiles.

Choose one of the following options from the drop-down list to determine how to set the site collection renewal process:
- Require business users to configure this field – Business users are required to select a site collection renewal profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the site collection renewal profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the site collection renewal profile here and it will not be displayed to business users.
Site collection storage – Use a storage management profile to allocate storage for new site collections created via this service request.

Select a storage management profile for new site collections. If you select multiple profiles, you must select a default one from the Default profile drop-down list. You can also click Create to configure a new storage management profile in the Create site collection storage management profile panel. For detailed instructions, refer to Configure Site Collection Storage Management Profiles.
Site information card – Select this setting to automatically add the Site Information Card to the created site collections.
Site maximum depth limit – Site depth limits the layers of sites that can be created under a site collection. Enter an integer between 1 and 12 to proceed to set the limit.
Site picture – Set the site picture or choose to let your business users upload the site picture in the request form.
- Upload the picture – Click the browse button, select a picture, and click Open. The picture is uploaded, and you can preview it. This picture will be displayed as the default site picture in the request form.
  
  Choose one of the following options from the drop-down list to determine how to set the site picture:
  - Allow business users to configure this field – Business users can configure the site picture in the request form.
  - Hide this field from business users – You set the site picture and it will not be displayed to business users.
- Specify the site picture URL – Enter the SharePoint URL of the picture. Make sure that a Microsoft 365 (All permissions), Cloud Governance for Microsoft 365, or custom app profile has been created for the tenant that contains the picture’s parent site in AvePoint Online Services. The picture will be retrieved from the URL and set as the picture of the created sites.
Site template – Select a site template for new site collections created via this service request. Click Add to open the Site template panel, select one or more site templates in the panel, and then click Add to add them to the table.

If you select more than one site template, select a default template from the Default site template drop-down list.

Choose one of the following options to determine how to set the site template:
- Require business users to configure this field – Business users are required to select the site template in the request form.
- Show this field as read-only to business users – You select the site template and it will be displayed to business users as read-only.
- Hide this field from business users – You select the site template, and it will not be displayed to business users.

Create Team Service

A Create team service allows you to define the team provisioning service request template for your business users. You can customize the settings for Microsoft Teams created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create team service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New teams created via the service request will reside in the chosen tenant.

NOTE
The Microsoft Graph API application permission TeamMember.ReadWrite.All is required in your tenant’s Microsoft Entra ID app to add or remove members from teams. Go to AvePoint Online Services > App management to re-authorize the app. If your tenant is using the custom Azure app, make sure the custom app has the TeamMember.ReadWrite.All permission and re-authorize the app.
Multi-Geo locations – This section appears only when your Microsoft 365 tenant has the Multi-Geo Capabilities in Microsoft 365 service plan. By default, new teams will be created in your tenant’s central location. The central location is the geo location where your tenant was originally provisioned.

To enable team provisioning in multi-geo locations, choose one of the following options and configure the corresponding settings:
- Select specific geo locations – If you allow team data to be stored in different geo locations, select geo locations to set the scope, and your business users will choose geo locations from the scope.
  
  Click Add to open the Region panel, select one or more geo locations in the panel, and then click Add to add them to the table.
  
  If you add more than one geo location, select a default location from the Default geo location drop-down list.
  
  Choose one of the following options to determine how to set the geo locations:
  - Require business users to configure this field – Business users are required to select the geo location in the request form.
  - Show this field as read-only to business users – You select the geo location, and it will be displayed to business users as read-only.
  - Hide this field from business users – You select the geo location, and it will not be displayed to business users.
- Use the preferred data location of the selected user role to determine the geo location – If you do not allow your business users to choose geo locations, you can choose to retrieve the preferred data location (PDL) of the requester or primary team contact as the geo location. Select the $Requester or $Primary contact role from the drop-down list.
  
  NOTE
  If the requester or primary team contact does not have the PDL property, the Microsoft 365 Group will be created in your tenant’s central location.
Team name & description – Choose to let your business users manually enter team names in the request form, or you set construction rules for the team names, and decide whether requesters can use a team name that is already in use.
- Construct team name – If you leave the checkbox deselected, business users can specify team names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the team name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or group, Managed metadata, Lookup, or Microsoft Entra property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the team name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build team names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for team names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build team names. This field will be displayed to business users as read-only.
- Do not allow duplicate team names – With the checkbox selected, business users who submit the request via this service will not be allowed to create a team with a name that is already in use.
- Team description – Enter a description for the team.
  
  Choose one of the following options from the drop-down list to determine how to set the team description:
  - Allow business users to configure this field – You can enter a team description. Business users can edit the team description in the request form.
  - Require business users to configure this field – Business users are required to configure the team description in the request form.
  - Show this field as read-only to business users – The team description will be displayed to business users as read-only.
  - Hide this field from business users – The team description will not be displayed to business users.
Privacy – Configure the privacy settings for new teams created via the service request. Choose one of the following privacy settings:
- Public – Anyone can see team content
- Private – Only members can see team content
Choose one of the following options from the drop-down list to determine how to set the privacy settings:
- Require business users to configure this field – Business users are required to configure the privacy settings in the request form.
- Show this field as read-only to business users – The privacy settings configured here will be applied to teams created via this service. This field will be displayed to business users as read-only.
- Hide this field from business users – The privacy settings configured here will be applied to teams created via this service. This field will not be displayed to business users.
Classification – Select one or more classifications that you wish to apply to new teams created via the service request. If you select more than one classification, select a default classification from the Default classification drop-down list.

Choose one of the following options from the drop-down list to determine how to set the classification:
- Require business users to configure this field – Business users are required to select a classification in the request form from what you’ve selected in this service.
- Show this field as read-only to business users – The default classification will be applied to new teams, and it will be displayed to business users as read-only.
- Hide this field from business users – The default classification will be applied to new teams, and it will not be displayed to business users.
Note the following:
- Once the integration with sensitivity labels is enabled in your tenant, the Classification section will be hidden and no longer require configuration.
- Team classifications can be created in the Cloud Governance admin center > System settings > Group/Team advanced settings. You can refer to the instructions in the Configure Group/Team Advanced Settings section. You can also create team classifications by using Microsoft PowerShell. For more details, refer to the Microsoft article: Create classifications for Microsoft 365 Groups in your organization.
Sensitivity label – Select a sensitivity label for new teams created by this service. If you select multiple sensitivity labels, select a default one from the Default sensitivity label drop-down list. You can also select None if you allow your business users to not select any sensitivity label in the service request form to apply to the team.

Note the following:
- This section only appears when the sensitivity is enabled for your tenant in Settings > System settings > Sensitivity labels in the Cloud Governance admin center. For more instructions, refer to Enable Integration with Sensitivity Labels.
- Make sure that your tenant has already created and published the sensitivity labels in Microsoft 365. To allow Cloud Governance to retrieve external user access and external sharing settings of labels, configure the Cloud Governance for Exchange app and assign it the Compliance Administrator role. Without the configurations, an error task will be generated when configurations in the service requests conflict with the applied sensitivity label settings.
Choose one of the following options from the drop-down list to determine how to set the sensitivity label:
- Require business users to configure this field – Business users are required to select a sensitivity label in the request form from what you’ve selected in this service.
- Show this field as read-only to business users – The default sensitivity label will be applied to new teams, and it will be displayed to business users as read-only.
- Hide this field from business users – The default sensitivity label will be applied to new teams, and it will not be displayed to business users.
Contact – Select the primary contact and/or secondary contact for the new teams created via the service request.
- Primary contact – The primary contact will be responsible for managing the new teams.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
  - Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary team contact in the request form.
    - Show this field as read-only to business users – You select the primary team contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary team contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when team provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new teams when the primary contact is unavailable. You can also click the refresh button to retrieve the latest available profiles.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
  - Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Allow business users to configure this field – You can select the secondary team contact. Business users can choose whether to edit, remove, or assign the secondary team contact in the request form.
    - Require business users to configure this field – Business users are required to select the secondary team contact in the request form.
    - Show this field as read-only to business users – You select the secondary team contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary team contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when team provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
Team owners – Add one or more Microsoft 365 users as the owners of the new teams created via the service request. Note that only Microsoft 365 users who have a license for Microsoft Teams are allowed to be specified as team owners.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as team owners in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Team owners – Enter the names of users as the team owners, or enter $ to select from available roles, and the user who takes the role will be the team owner. Choose one of the following options from the drop-down list to determine how to set the team owners:
  - Require business users to configure this field – Business users are required to select the team owners in the request form.
  - Show this field as read-only to business users – You select the team owners, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the team owners, and they will not be displayed to business users.
- Predefined team owners – Predefined team owners that you selected here will be the default team owners. Enter the names of users as the predefined team owners, or enter $ to select from available roles, and the user who takes the role will be the predefined team owner. Choose one of the following options from the drop-down list to determine how to set the team owners:
  - Show this field as read-only to business users – The predefined team owners will be displayed to business users as read-only.
  - Hide this field from business users – The predefined team owners will not be displayed to business users.
Show links in the request and task details page – Choose whether to display links of Team, Planner, Site, Files, and/or Notebook that will be created together with new teams.

Apart from the default settings, you can click the add button to add any of the following settings to a Create team service based on your requirement, and then complete the configurations:

@Mentions – Choose whether to allow team members to use @team and @channel mentions. You can enable the following options:
- Show members the option to @team or @[team name] (this will send a notification to everyone on the team)
- Show members the option to @channel or @[channel name] (this will send a notification to everyone who has favorited the channel being mentioned)
Choose one of the following options from the drop-down list to determine how to set the settings:
- Require business users to configure this field – Business users are required to select the options in the request form.
- Show this field as read-only to business users – You select the options, and they will be displayed to business users as read-only.
- Hide this field from business users – You select the options, and they will not be displayed to business users.
NOTE
Due to Microsoft Graph API limitations, this setting is not available if you only allow business users to create a team using an existing team.
Create a team from an existing team – Choose how to create teams from existing teams, as well as what will be copied from the teams selected in requests. Note that messages, files, and content will not be copied. After a team is created via the service request, business users will still need to set up tabs and connectors. Besides, this setting is not available if you have already added the Create a team using a team template setting.
- Allow business users to select from their own teams – In the request form, the teams that the requester belongs to will be displayed and are available to be selected.
- Allow business users to select from the team scope – Click Add team, enter one or more team names in the Add team panel, and then click Save to add the selected teams to the table. In the request form, the teams you add here will be displayed and are available to be selected.
You can choose to copy Channels, Apps, Tabs, Members, and Team settings (Team Member Permissions, Guest Permissions, @Mentions, and Fun Stuff) from existing teams, and then choose one of the following options from the drop-down list to determine how to set what will be copied from the selected team:
- Require business users to configure this field – Business users are required to set what will be copied from the selected team.
- Show this field as read-only to business users – You set what will be copied from the selected team and the settings will be displayed to business users as read-only.
- Hide this field from business users – You set what will be copied from the selected team and the settings will not be displayed to business users.
Create a team using a team template – Add one or more team templates to allow your business users to create a team using a team template. Note, this is not available if you have already added the Create a team using an existing team setting.

Click Add team template, select one or more team templates in the Add team template panel, and then click Add to the list to add the selected templates to the list. In the request form, the team templates that you add will be displayed and are available to be selected.

For team templates, there are built-in templates and custom templates. You can add custom team templates in the Cloud Governance admin center > Settings > System settings > Team templates. For more instructions, refer to Configure Team Templates.
Exchange global address list – Choose whether to hide new teams created via the service request from the Exchange global address list by selecting Yes or No.

Choose one of the following options from the drop-down list to determine how to set the Exchange global address list setting:
- Allow business users to configure this field – Business users can choose whether to hide new teams created via service request from the Exchange global address list.
- Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
- Hide this field from business users – Your configuration here will not be displayed to business users.
External sharing – Use an external sharing profile to enable unique guest access or external sharing settings for new teams created via the service request and corresponding group team sites. Teams with the profile applied can have more restrictive settings than the global configurations in the Microsoft 365 admin center.

Select an external sharing profile for new teams. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new external sharing profile in the Create team external sharing profile panel. For detailed instructions, refer to Configure Team External Sharing Profiles.

Choose one of the following options from the drop-down list to determine how to set the external sharing settings:
- Require business users to configure this field – Business users are required to select an external sharing profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the external sharing profile here, and it will be displayed to business users as read-only.
- Hide this field from business users – You select the external sharing profile, and it will not be displayed to business users.
Fun stuff – Choose whether to allow team members to use GIFs, stickers, memes, and custom memes. You can enable the following options:
- Giphy – With the Enable Giphy checkbox selected, choose Moderate or Strict from the drop-down list to filter out inappropriate content.
- Stickers and memes – Choose whether to Enable stickers and memes. With the memes enabled, choose whether to Allow memes to be uploaded to enable custom memes.
Choose one of the following options from the drop-down list to determine how to set the fun stuff:
- Require business users to configure this field – Business users are required to select the fun stuff options in the request form.
- Show this field as read-only to business users – You select the fun stuff options here and they will be displayed to business users as read-only.
- Hide this field from business users – You select the fun stuff options here and they will not be displayed to business users.
NOTE
Due to Microsoft Graph API limitations, this setting is not available if you only allow business users to create a team using an existing team.
Group team site address – Configure the construction rules for the group team site address. Business users can manually construct the group team site address according to the corresponding construction rule in the request form.

You can add construction rules for group team site address. Refer to the following steps to construct a rule for the group team site address:
1. Click Add to add a rule for the constructed group team site address.
2. Select Text, Metadata, Attribute, or Team property as a rule from the drop-down list, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or group, Managed metadata, Lookup, or Microsoft Entra property can be used to set the rule.
3. You can repeat the steps above to add more rules that will be used to build the group team site address.
Choose one of the following options from the drop-down list to determine how to set the group team site address:
- Show this field as read-only to business users – You can select this option if you want to apply the rule and do not allow business users to change the values in the request form.
- Hide this field from business users – You can select this option if you want to apply the rule and do not want to show this field in the request form.
Group team site template – Select a custom site template from the drop-down list for the group team sites created along with new teams.

Choose one of the following options from the drop-down list to determine how to set the group team site template:
- Require business users to configure this field – Business users are required to select the group team site template in the request form.
- Show this field as read-only to business users – You select the group team site template here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the group team site template here and it will not be displayed to business users.
NOTE
This field only appears when your Microsoft 365 environment has a custom team site template configured. For more details about the custom site template, refer to the following Microsoft article: SharePoint site template and site script overview.
Group team site storage – Use a storage management profile to allocate storage for group team sites as well as set the site storage threshold for the group team sites created along with new teams.

Select a storage management profile for new teams. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new storage management profile in the Create team storage management profile panel. For detailed instructions, refer to Configure Team Storage Management Profiles.

Choose one of the following options from the drop-down list to determine how to set the group team site storage:
- Require business users to configure this field – Business users are required to select a storage management profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the storage management profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the storage management profile here and it will not be displayed to business users.
Guest permissions – Choose whether to allow guests to create, edit, or delete channels. You can enable the following options:
- Allow guests to create and update channels
- Allow guests to delete channels
Choose one of the following options from the drop-down list to determine how to set the guest permissions:
- Require business users to configure this field – Business users are required to set the guest permissions in the request form.
- Show this field as read-only to business users – You set the guest permissions here and it will be displayed to business users as read-only.
- Hide this field from business users – You set the guest permissions here and it will not be displayed to business users.
NOTE
Due to Microsoft Graph API limitations, this setting is not available if you only allow business users to create a team using an existing team.
Hub site – Choose whether to register the group team site as a hub site or associate the group team site with an existing hub site and configure the corresponding settings:
- Register the group team site as a hub site – With this option selected, specify users or groups who can associate sites with the hub.
  
  Choose one of the following options to determine how to set people who can associate with the hub:
  - Allow business users to configure this field – Business users can select users or groups in the request form.
  - Require business users to configure this field – Business users are required to select users or groups in the request form.
  - Show this field as read-only to business users – You select users or groups, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select users or groups, and they will not be displayed to business users.
- Associate the group team site with a hub site – Choose one of the following options to set the available hub site scope:
  - All existing hub sites are available for association – With this option selected, all existing hub sites in your tenant will be available for association. Select a default hub site from the Default hub site drop-down list.
    
    Choose one of the following options to determine how to set the hub site:
    - Allow business users to configure this field – Business users choose whether to select a hub site in the request form.
    - Require business users to configure this field – Business users are required to select a hub site in the request form.
    - Show this field as read-only to business users – You select a hub site and it will be displayed to business users as read-only.
    - Hide this field from business users – You select a hub site and it will not be displayed to business users.
  - Defined set of existing hub sites – You define a scope of hub sites that are available for association. Click Add to open the Add hub site panel, select one or more hub sites in the panel, and then click Save to add them to the table.
    
    If you add more than one hub site, select a default site from the Default hub site drop-down list.
    
    Choose one of the following options to determine how to set the hub site:
    - Require business users to configure this field – Business users are required to select a hub site in the request form.
    - Show this field as read-only to business users – You select a hub site and it will be displayed to business users as read-only.
    - Hide this field from business users – You select a hub site and it will not be displayed to business users.
  - Choose whether to Only display hub sites that the requester has permission.
Locale – Select a locale from the drop-down list to specify the way the group team sites created along with new teams displays numbers, dates, and time.

Choose one of the following options from the drop-down list to determine how to set the locale:
- Require business users to configure this field – Business users are required to select a locale in the request form.
- Show this field as read-only to business users – You select a locale here and it will be displayed to business users as read-only.
- Hide this field from business users – You select a locale here and it will not be displayed to business users.
Outlook experience – Choose whether to Hide the team from the Outlook client by choosing from Yes or No. If you choose Yes, new teams created via the service request will not be shown in the Outlook client.
Site information card – With this setting added to the service, the Site Information Card will be automatically added into the group team sites created along with new teams.
Team contact election – Use the team contact election profile to automate the team contact election process, which will be triggered to determine the proper contacts when the primary or secondary team contact is invalid.

Select a team contact election profile for new teams. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new team contact election profile in the Create team contact election profile panel. For detailed instructions, refer to Configure Team Contact Election Profiles.

Choose one of the following options from the drop-down list to determine how to set the team contact election process:
- Require business users to configure this field – Business users are required to select a team contact election profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the team contact election profile here, and it will be displayed to business users as read-only.
- Hide this field from business users – You select the team contact election profile here, and it will not be displayed to business users.

Team ID – Set the domain scope for the team IDs and choose to let your business users manually enter the team ID in the request form, or you set construction rules for the team IDs.

Set domain scope – If you leave this checkbox deselected, the team ID will follow the default domain of the tenant. With this checkbox selected, you can select the following methods to set the domain scope:

To make this setting available, make sure an app profile for Cloud Governance for Exchange service app has been created in AvePoint Online Services. If your tenant uses the custom app, make sure you add the Exchange.ManageAsApp permission to the custom Azure app, assign the Exchange Administrator role to the app, and re-authorize the app.
- Select specific domains – Select the domain scope for the team IDs. Then, select a domain from the drop-down list as the Default domain.
  
  Choose one of the following options from the drop-down list to determine how to set the team ID domain scope:
  - Require business users to configure this field – This setting is required to be configured in a request form. The domain scope you set here will be displayed to business users as available options.
  - Show this field as read-only to business users – The domain scope you set here will be displayed to business users as read-only.
  - Hide this field from business users – The domain scope will not be displayed to business users.
- Use the preferred domain of therequester to determine theteam domain – If you do not allow your business users to choose the domain, you can choose to retrieve The domain set in the requester's username or The domain set in the requester’s primary email address as the team domain.

Construct team ID – If you leave the Construct team ID checkbox deselected, business users can specify team IDs in the request form. With the Construct team ID checkbox selected, click Add for the prefix and/or suffix of the team ID, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.

NOTE

The metadata with the type of Single line of text, Choice, Person or group, Managed metadata, Lookup, or Microsoft Entra property can be used to set the rule.

Choose whether to Automatically add a sequence number to the end of the team ID. Refer to the example below to enter the sequence number rule.

Sequence Number	Note
{01}	The sequence number at the end of the team ID will increase from 01 to 99 in numerical value.
{01*}	The sequence number at the end of the team ID will increase from 01 to 999999999 in numerical value.

Choose one of the following options from the drop-down list to determine how to set the team ID:

Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build team IDs.
Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for team IDs.
Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build team IDs. This field will be displayed to business users as read-only.
Hide this field from business users – The team ID will not be displayed to business users.

Team member permissions – Choose the actions you allow team members to perform in the team:
- Allow members to create and update channels
- Allow members to create private channels
- Allow members to delete and restore channels
- Allow members to add and remove apps
- Allow members to create, update, and remove tabs
- Allow members to create, update, and remove connectors
- Allow members to delete their messages
- Allow members to edit their messages
Choose one of the following options from the drop-down list to determine how to set the team member permissions:
- Require business users to configure this field – Business users are required to set the team member permissions in the request form.
- Show this field as read-only to business users – You set the team member permissions and they will be displayed to business users as read-only.
- Hide this field from business users – You set the team member permissions and they will not be displayed to business users.
NOTE
Due to Microsoft Graph API limitations, this setting is not available if you only allow business users to create a team using an existing team.
Team members (Dynamically assigned) – You can define rules to dynamically assign members for new teams created via the service request. Note this is not available if you have already added the Team members (Manually added) setting to manually add team members.
- People picker filter profiles – Select a people picker filter profile, and the filter settings will be applied to limit what users can be dynamically assigned as team members.
  
  You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Define dynamic membership rules – To add dynamic membership rules, click Add and configure the following settings in the Define dynamic rules panel. Microsoft 365 users who meet the rules will automatically become team members.
  - Dynamic team membership rule category – Select from Contact information, License, or Organization as the category for the dynamic membership rule.
  - Rule – Select a dynamic membership rule from the drop-down list.
  - Condition – Define the condition to Equals, Contains, or Is of a certain value.
  - Value – Enter a value for the rule. Users whose properties conform to the value will be added to the team. You can choose whether to Allow requesters to define the value.
  You can choose whether to Allow requesters to add or remove dynamic rules in the request form.
  
  After you configure a rule, click Add to list to add it to the list. If you want to remove all the rules in the list, click Clear.
  NOTE
  - The dynamic membership feature was built by Cloud Governance. Cloud Governance did not leverage the dynamic membership feature of Microsoft Entra. Therefore, after a team with dynamic membership is created via a Cloud Governance request, the membership type of the team’s associated group shown in the Entra and Microsoft 365 admin center is Assigned, rather than Dynamic.
  - For inactive users that meet the dynamic membership rules but have been blocked in Microsoft Entra, they can still be added as team members. For inactive users that meet the rules but have been deleted in Microsoft Entra, they will not be added to the team.
Team members (Manually added) – Add users, groups (Microsoft 365 Groups, distribution groups, mail-enabled security groups, or security groups) as members for new teams created via the service request. Note that if you specify a group, the members of the group will be added but not the group itself. This setting is not available if you have already added the Team members (Dynamically assigned) setting to dynamically assign team members.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as team members in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Team members – Enter the names of users as the team members, or enter $ to select from available roles, and the user who takes the role will be the team member. Choose one of the following options from the drop-down list to determine how to set the team members:
  - Allow business users to configure this field – You can select the team members. Business users can choose whether to edit or assign the team members in the request form.
  - Require business users to configure this field – Business users are required to select the team members in the request form.
  - Show this field as read-only to business users – You select the team members, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the team members, and they will not be displayed to business users.
- Predefined team members – Predefined team members that you selected here will be the default team members. Enter the names of users as the predefined team members, or enter $ to select from available roles, and the user who takes the role will be the predefined team member.
  
  Choose one of the following options from the drop-down list to determine how to set the team members:
  - Show this field as read-only to business users – The predefined team members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined team members will not be displayed to business users.
Team picture – Set the team picture or choose to let your business users upload the team picture in the request form.
- Upload the picture – Click the browse button, select a picture, and click Open. The picture is uploaded, and you can preview it. This picture will be displayed as the default team picture in the request form.
  
  Choose one of the following options from the drop-down list to determine how to set the team picture:
  - Allow business users to configure this field – Business users can configure the team picture in the request form.
  - Hide this field from business users – You set the team picture and it will not be displayed to business users.
- Specify the team picture URL – Enter the SharePoint URL of the picture. Make sure that a Microsoft 365 (All permissions), Cloud Governance for Microsoft 365, or custom app profile has been created for the tenant that contains the picture’s parent site in AvePoint Online Services. The picture will be retrieved from the URL and set as the picture of the created teams.
Team renewal – Use a team renewal profile to determine the renewal schedule and governance details that must be confirmed when a team goes through the renewal process.

Select a team renewal profile for new teams. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new team renewal profile in the Create team renewal profile panel. For detailed instructions, refer to Configure Team Renewal Profiles.

Choose one of the following options from the drop-down list to determine how to set the team renewal process:
- Require business users to configure this field – Business users are required to select a team renewal profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the team renewal profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the team renewal profile here and it will not be displayed to business users.
Time zone – Select a standard time zone for the group team sites created along with new teams.

Choose one of the following options from the drop-down list to determine how to set the time zone:
- Require business users to configure this field – Business users are required to select a time zone in the request form.
- Show this field as read-only to business users – You select a time zone here, and it will be displayed to business users as read-only.
- Hide this field from business users – You select a time zone here, and it will not be displayed to business users.
Welcome email – Choose whether to send a welcome email to users when they are added to the teams’ associated Microsoft 365 Groups by choosing from Yes or No. If you choose Yes, users will receive the welcome email when they are added to teams’ associated groups.

To make this setting available, make sure an app profile for Cloud Governance for Exchange service app has been created in AvePoint Online Services. If your tenant uses the custom app, make sure you add the Exchange.ManageAsApp permission to the custom Azure app, assign the Exchange Administrator role to the app, and re-authorize the app.

Create Viva Engage Community Service

A Create Viva Engage community service allows you to define the Viva Engage community provisioning service request template for your business users. You can customize the settings for Viva Engage communities created by the service request as well as configure available options for your business users to choose from when they request this service.

The following settings are the default settings of a Create Viva Engage community service, and they are required to be configured:

Tenant – Select a Microsoft 365 tenant as the service scope. New communities created via the service request will reside in the chosen tenant.

NOTE
The Microsoft Graph API application permission Community.ReadWrite.All is required in your tenant’s Microsoft Entra ID app to create communities in Viva Engage. Go to AvePoint Online Services > App management to re-authorize the app. If your tenant is using the custom Azure app, make sure the custom app has the Community.ReadWrite.All permission.
Community name & description – Choose to let your business users manually enter community names in the request form, or you set construction rules for the community names, and decide whether requesters can use a community name that is already in use.
- Construct community name – If you leave the checkbox deselected, business users can specify community names in the request form. With the checkbox selected, click Add for the prefix and/or suffix of the community name, select Text, Metadata, or Attribute from the drop-down list as a rule type, and then define the value for the selected rule.
  
  NOTE
  The metadata with the type of Single line of text, Choice, Person or group, Managed metadata, Lookup, or Microsoft Entra property can be used to set the rule.
  
  Choose one of the following options from the drop-down list to determine how to set the community name:
  - Allow business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users can enter additional content to build community names.
  - Require business users to configure this field – The prefixes/suffixes you set here will be displayed to business users as read-only. Apart from the prefixes/suffixes, business users are required to enter additional content for community names.
  - Show this field as read-only to business users – The prefixes/suffixes you set here will be used to build community names. This field will be displayed to business users as read-only.
- Community description – Enter a description for the community.
  
  Choose one of the following options from the drop-down list to determine how to set the community description:
  - Allow business users to configure this field – You can enter a community description. Business users can edit the community description in the request form.
  - Require business users to configure this field – Business users are required to configure the community description in the request form.
  - Show this field as read-only to business users – The community description will be displayed to business users as read-only.
  - Hide this field from business users – The community description will not be displayed to business users.
Classification – Select one or more classifications that you wish to apply to new communities created via the service request. If you select more than one classification, select a default classification from the Default classification drop-down list.

Choose one of the following options from the drop-down list to determine how to set the classification:
- Require business users to configure this field – Business users are required to select a classification in the request form from what you’ve selected in this service.
- Show this field as read-only to business users – The default classification will be applied to new communities, and it will be displayed to business users as read-only.
- Hide this field from business users – The default classification will be applied to new communities, and it will not be displayed to business users.
NOTE
Once the integration with sensitivity labels is enabled in your tenant, the Classification section will be hidden and no longer requires configuration.
Sensitivity label – Select a sensitivity label for new communities created by this service. If you select multiple sensitivity labels, select a default one from the Default sensitivity label drop-down list. You can also select None if you allow your business users to not select any sensitivity label in the service request form to apply to the team.
NOTE
- This section only appears when the sensitivity is enabled for your tenant in Settings > System settings > Sensitivity labels in the Cloud Governance admin center. For more instructions, refer to Enable Integration with Sensitivity Labels.
- Make sure that your tenant has already created and published the sensitivity labels in Microsoft 365.
Choose one of the following options from the drop-down list to determine how to set the sensitivity label:
- Require business users to configure this field – Business users are required to select a sensitivity label in the request form from what you’ve selected in this service.
- Show this field as read-only to business users – The default sensitivity label will be applied to new communities, and it will be displayed to business users as read-only.
- Hide this field from business users – The default sensitivity label will be applied to new communities, and it will not be displayed to business users.
Privacy – Configure the privacy settings for new communities created via the service request. Choose one of the following privacy settings:
- Public – Anyone in your network can view and join this community
- Private – Only approved community members can view or participate
Choose one of the following options from the drop-down list to determine how to set the privacy settings:
- Require business users to configure this field – Business users are required to configure the privacy settings in the request form.
- Show this field as read-only to business users – The privacy settings configured here will be applied to communities created via this service. This field will be displayed to business users as read-only.
- Hide this field from business users – The privacy settings configured here will be applied to communities created via this service. This field will not be displayed to business users.
Community contacts – Select the primary contact and/or secondary contact for the new communities created via the service request.
- Primary contact – The primary contact will be responsible for managing the new communities.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
  - Primary contact – Enter the name of a user as the primary contact, or enter $ to select from available roles, and the user who takes the role will be the primary contact.
  - Choose one of the following options from the drop-down list to determine how to set the primary contact:
    - Require business users to configure this field – Business users are required to select the primary community contact in the request form.
    - Show this field as read-only to business users – You select the primary community contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the primary community contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when community provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
- Secondary contact – The secondary contact will be responsible for managing the new communities when the primary contact is unavailable. You can also click the refresh button to retrieve the latest available profiles.
  - People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what user is searchable and can be chosen as the secondary contact in the end user request form. You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles.
  - Secondary contact – Enter the name of a user as the secondary contact, or enter $ to select from available roles, and the user who takes the role will be the secondary contact.
  - Choose one of the following options from the drop-down list to determine how to set the secondary contact:
    - Allow business users to configure this field – You can select the secondary community contact. Business users can choose whether to edit, remove, or assign the secondary community contact in the request form.
    - Require business users to configure this field – Business users are required to select the secondary community contact in the request form.
    - Show this field as read-only to business users – You select the secondary community contact and they will be displayed to business users as read-only.
    - Hide this field from business users – You select the secondary community contact and they will not be displayed to business users.
  - Choose whether to Notify the contact when community provisioning is completed. With the checkbox selected, select an email template from the drop-down list that will be used to send the notification email.
Community admins – Add one or more Microsoft 365 users as the admins of the new communities created via the service request.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as community admins in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Community admins – Enter the names of users as the community admins, or enter $ to select from available roles, and the user who takes the role will be the community admin. Choose one of the following options from the drop-down list to determine how to set the community admin:
  - Require business users to configure this field – Business users are required to select the community admins in the request form.
  - Show this field as read-only to business users – You select the community admins, and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the community admins, and they will not be displayed to business users.
- Predefined community admins – Predefined community admins that you selected here will be the default community admins. Enter the names of users as the predefined community admins, or enter $ to select from available roles, and the user who takes the role will be the predefined community admin. Choose one of the following options from the drop-down list to determine how to set the community admins:
  - Show this field as read-only to business users – The predefined community admins will be displayed to business users as read-only.
  - Hide this field from business users – The predefined community admins will not be displayed to business users.
Show links in the request and task details page – Choose whether to display links of Community, Planner, Site, Files, and/or Notebook that will be created together with new communities.

Apart from the default settings, you can click the add button to add any of the following settings to a Create Viva Engage community service based on your requirement, and then complete the configurations:

Community contact election – Use the community contact election profile to automate the community contact election process, which will be triggered to determine the proper contacts when the primary or secondary community contact is deactivated.

Select a community contact election profile for new communities. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new community contact election profile in the Create Viva Engage community contact election profile panel. For detailed instructions, refer to Configure Viva Engage Community Contact Election Profile.

Choose one of the following options from the drop-down list to determine how to set the community contact election process:
- Require business users to configure this field – Business users are required to select a community contact election profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the community contact election profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the community contact election profile here and it will not be displayed to business users.
Community members (Dynamically assigned) – You can define rules to dynamically assign members for new communities created via the service request. Please do note that this is not available if you have already added the Community members (Manually added) setting to manually add community members.
- People picker filter profiles – Select a people picker filter profile, and the filter settings will be applied to limit what users can be dynamically assigned as community members.
  
  You can click View profile details to view details of your selected profile. You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Define dynamic membership rules – To add dynamic membership rules, click Add and configure the following settings in the Define dynamic rules panel. Microsoft 365 users who meet the rules will automatically become community members.
  - Dynamic community membership rule category – Select from Contact information, License, or Organization as the category for the dynamic membership rule.
  - Rule – Select a dynamic membership rule from the drop-down list.
  - Condition – Define the condition to Equals, Contains, or Is of a certain value.
  - Value – Enter a value for the rule. A user whose properties conform to the value will be added to the community. You can choose whether to Allow requesters to define the value.
  You can choose whether to Allow requesters to add or remove dynamic rules in the request form.
  
  After you configure a rule, click Add to list to add it to the list. If you want to remove all the rules in the list, click Clear.
  
  Note the following:
  - The dynamic membership feature was built by Cloud Governance. Cloud Governance did not leverage the dynamic membership feature of Microsoft Entra. Therefore, after a community with dynamic membership is created via a Cloud Governance request, the membership type of the community shown in the Microsoft Entra and Microsoft 365 admin center is Assigned, rather than Dynamic.
  - For inactive users that meet the dynamic membership rules but have been blocked in Microsoft Entra, they can still be added as community members. For inactive users that meet the rules but have been deleted in Microsoft Entra, they will not be added to the community.
Community members (Manually added) – Add users, groups (Microsoft 365 Groups, distribution groups, security groups, or mail-enabled security groups) as members for new communities created via the service request. Note that if you specify a community, the members of the group will be added but not the group itself. This setting is not available if you have already added the Community members (Dynamically assigned) setting to dynamically assign community members.
- People picker filter profile – Select a people picker filter profile from the drop-down list, and the filter settings determine what users are searchable and can be chosen as community members in the end user request form. You can click View profile details to view details of your selected profile.
  
  You can also click the create button or go to Management > Profiles & templates > People picker filter profiles to create a people picker filter profile. For more instructions, refer to Configure People Picker Filter Profiles. You can also click the refresh button to retrieve the latest available profiles.
- Community members – Enter the names of users as the community members, or enter $ to select from available roles, and the user who takes the role will be the community member. Choose one of the following options from the drop-down list to determine how to set the community members:
  - Allow business users to configure this field – You can select the community members. Business users can choose whether to edit or assign the community members in the request form.
  - Require business users to configure this field – Business users are required to select the community members in the request form.
  - Show this field as read-only to business users – You select the community members and they will be displayed to business users as read-only.
  - Hide this field from business users – You select the community members and they will not be displayed to business users.
- Predefined community members – Predefined community members that you selected here will be the default community members. Enter the names of users as the predefined community members, or enter $ to select from available roles, and the user who takes the role will be the predefined community member.
  
  Choose one of the following options from the drop-down list to determine how to set the community members:
  - Show this field as read-only to business users – The predefined community members will be displayed to business users as read-only.
  - Hide this field from business users – The predefined community members will not be displayed to business users.
Community renewal – Use a community renewal profile to determine the renewal schedule and governance details that must be confirmed when a community goes through the renewal process.

Select a community renewal profile for new communities. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new community renewal profile in the Create Viva Engage community renewal profile panel. For detailed instructions, refer to Configure Viva Engage Community Renewal Profiles.

Choose one of the following options from the drop-down list to determine how to set the community renewal process:
- Require business users to configure this field – Business users are required to select a community renewal profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the community renewal profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the community renewal profile here and it will not be displayed to business users.
Community sitestorage – Use a storage management profile to allocate storage for community sites as well as set the site storage threshold for the community sites created along with new communities.

Select a storage management profile for new teams. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new storage management profile in the Create Viva Engage community storage management profile panel. For detailed instructions, refer to Configure Viva Engage Community Storage Management Profiles.

Choose one of the following options from the drop-down list to determine how to set the community site storage:
- Require business users to configure this field – Business users are required to select a storage management profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the storage management profile here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the storage management profile here and it will not be displayed to business users.
Community sitetemplate – Select a custom site template from the drop-down list for the community sites created along with new communities.

Choose one of the following options from the drop-down list to determine how to set the community site template:
- Require business users to configure this field – Business users are required to select the community site template in the request form.
- Show this field as read-only to business users – You select the community site template here and it will be displayed to business users as read-only.
- Hide this field from business users – You select the community site template here and it will not be displayed to business users.
NOTE
This field only appears when your Microsoft 365 environment has a custom community site template configured. For more details about the custom site template, refer to the following Microsoft article: SharePoint site template and site script overview.
Exchange global address list – Choose whether to hide new communities created via the service request from the Exchange global address list by selecting Yes or No.

Choose one of the following options from the drop-down list to determine how to set the Exchange global address list setting:
- Allow business users to configure this field – Business users can choose whether to hide new communities created via the service request from the Exchange global address list.
- Show this field as read-only to business users – Your configuration here will be displayed to business users as read-only.
- Hide this field from business users – Your configuration here will not be displayed to business users.
External sharing – Use an external sharing profile to enable unique external sharing settings for new communities created via the service request. Communities with the profile applied can have more restrictive settings than the global configurations in the Microsoft 365 admin center.

Select an external sharing profile for new communities. If you select multiple profiles, select a default one from the Default profile drop-down list. You can also click Create to configure a new external sharing profile in the Create Viva Engage community external sharing profile panel. For detailed instructions, refer to Configure Viva Engage Community External Sharing Profiles.

Choose one of the following options from the drop-down list to determine how to set the external sharing settings:
- Require business users to configure this field – Business users are required to select an external sharing profile in the request form from what you’ve selected in the service.
- Show this field as read-only to business users – You select the external sharing profile here, and it will be displayed to business users as read-only.
- Hide this field from business users – You select the external sharing profile, and it will not be displayed to business users.
Hub site – Choose whether to register the community site as a hub site or associate the community site with an existing hub site and configure the corresponding settings:
- Register the community site as a hub site – With this option selected, specify users or groups who can associate sites with the hub.
  
  Choose one of the following options to determine how to set people who can associate with the hub:
  - Allow business users to configure this field – Business users can select users or groups in the request form.
  - Require business users to configure this field – Business users are required to select users or groups in the request form.
  - Show this field as read-only to business users – You select users or groups and they will be displayed to business users as read-only.
  - Hide this field from business users – You select users or groups and they will not be displayed to business users.
- Associate the community site with a hub site – Choose one of the following options to set the available hub site scope:
  - All existing hub sites are available for association – With this option selected, all existing hub sites in your tenant will be available for association. Select a default hub site from the Default hub site drop-down list.
    
    Choose one of the following options to determine how to set the hub site:
    - Allow business users to configure this field – Business users choose whether to select a hub site in the request form.
    - Require business users to configure this field – Business users are required to select a hub site in the request form.
    - Show this field as read-only to business users – You select a hub site and it will be displayed to business users as read-only.
    - Hide this field from business users – You select a hub site and it will not be displayed to business users.
  - Defined set of existing hub sites – You define a scope of hub sites that are available for association. Click Add to open the Add hub site panel, select one or more hub sites in the panel, and then click Save to add them to the table.
    
    If you add more than one hub site, select a default site from the Default hub site drop-down list.
    
    Choose one of the following options to determine how to set the hub site:
    - Require business users to configure this field – Business users are required to select a hub site in the request form.
    - Show this field as read-only to business users – You select a hub site and it will be displayed to business users as read-only.
    - Hide this field from business users – You select a hub site and it will not be displayed to business users.
  - Choose whether to Only display hub sites that the requester has permission.
Locale – Select a locale from the drop-down list to specify the way the community sites created along with new communities display numbers, dates, and time.

Choose one of the following options from the drop-down list to determine how to set the locale:
- Require business users to configure this field – Business users are required to select a locale in the request form.
- Show this field as read-only to business users – You select a locale here and it will be displayed to business users as read-only.
- Hide this field from business users – You select a locale here and it will not be displayed to business users.
Outlook experience – Choose whether to Hide the group from the Outlook client by selecting Yes or No. If you choose Yes, new communities created via the service request will not be shown in the Outlook client.
Site information card – With this setting added to the service, the Site Information Card will be automatically added into the community sites created along with new communities.
Time zone – Select a standard time zone for the community sites created along with new communities.

Choose one of the following options from the drop-down list to determine how to set the time zone:
- Require business users to configure this field – Business users are required to select a time zone in the request form.
- Show this field as read-only to business users – You select a time zone here, and it will be displayed to business users as read-only.
- Hide this field from business users – You select a time zone here, and it will not be displayed to business users.

On this page

Settings

Configure Library Templates

Appendix E - Integration with ServiceNow

Appendix G - Supported References in Email Templates

Appendix J - Custom Azure App Permissions for Using AvePoint Cloud Governance

Configure Provisioning Services

Create Confide Project

Create Distribution Group Service

Create Mail-enabled Security Group Service

Create Microsoft 365 Group Service

Create Security Group Service

Create Library Service

Create List Service

Create Power BI Workspace Service

Create Equipment Mailbox Service

Create Room Mailbox Service

Create Private Channel Service

Create Shared Channel Service

Create Shared Mailbox Service

Create Site Collection Service

Create Team Service

Create Viva Engage Community Service

#Configure Provisioning Services

#Create Confide Project

#Create Distribution Group Service

#Create Mail-enabled Security Group Service

#Create Microsoft 365 Group Service

#Create Security Group Service

#Create Library Service

#Create List Service

#Create Power BI Workspace Service

#Create Equipment Mailbox Service

#Create Room Mailbox Service

#Create Private Channel Service

#Create Shared Channel Service

#Create Shared Mailbox Service

#Create Site Collection Service

#Create Team Service

#Create Viva Engage Community Service

Configure Provisioning Services

Create Confide Project

Create Distribution Group Service

Create Mail-enabled Security Group Service

Create Microsoft 365 Group Service

Create Security Group Service

Create Library Service

Create List Service

Create Power BI Workspace Service

Create Equipment Mailbox Service

Create Room Mailbox Service

Create Private Channel Service

Create Shared Channel Service

Create Shared Mailbox Service

Create Site Collection Service

Create Team Service

Create Viva Engage Community Service