Before You Begin

Subscription and Licensing Information

To find out how AvePoint charges for licenses for AvePoint Cloud Management service, refer to Licensing Information.

Manage My Settings

Use My Settings to view and update your account information as well as the system language of your AvePoint Cloud Management interface. To edit My Settings, click the username in the upper-right corner and then select My Settings. In the My Settings window, click Edit on the ribbon. You can update the following information:

Edit Information – A description about the currently logged-in user.
E-mail Address – The e-mail address that you want to receive any account-related notification e-mails.
Language Preference – The system language for your AvePoint Cloud Management interface. You can choose from English, Japanese, or French.

Click OK on the ribbon to save your configurations or click Cancel to exit without saving your changes.

To change the password of your account, go to the My Profile page in AvePoint Online Services. For details, refer to the AvePoint Online Services User Guide.

Scan Microsoft 365 Objects

To use AvePoint Cloud Management to manage your Microsoft 365 objects, including SharePoint Online site collections, OneDrive, and Microsoft 365 Groups/Teams team sites, the objects must be scanned to specific containers.

From January 21, 2018, the ability to scan and add Microsoft 365 objects via AvePoint Cloud Management was moved to Auto Discovery located in AvePoint Online Services. If you want to scan and add Microsoft 365 objects, navigate to AvePoint Online Services > Auto Discovery and configure scan profiles. For details, refer to Manage Auto Discovery.

Auto Discovery provides the service account profile and app profile authentication methods to scan objects. The easiest way to work with your environment is by registering an app profile. This ensures that all jobs that run in your environment are tagged as AvePoint activities and also ensures that we do not need to store any service accounts or passwords. When you use the app profile authentication method to scan objects, the app token within the app profile will be used to manage data, and the credentials of the Microsoft 365 Global Administrator account will not be stored by AvePoint Online Services – only your Administrator’s consent is recorded, and this consent can be monitored in your Microsoft Entra ID and can be revoked at any time from your environment. While we do suggest you use the app profile method, there are specific instances when this method is not recommended.

With Auto Discovery scan profiles configured, the objects will be automatically scanned. After the scan process is finished, the detected objects are available in AvePoint Cloud Management.

Required Permissions

The objects that are managed or reported in AvePoint Cloud Management must be scanned through the Auto Discovery in AvePoint Online Services. After the objects are scanned, the users who have permission to use an AvePoint Cloud Management module can fully use the functionalities to manage or report the objects.

Refer to the Required Permissions section in Cloud Management User Guide for the full list of permission requirements of the account used for Auto Discovery to ensure the functionalities of each AvePoint Cloud Management module.

The required permissions involve the Global Administrator, SharePoint Administrator, and Exchange Administrator roles in Microsoft 365. For details about these roles, refer to the Microsoft article About Microsoft 365 admin roles.

To ensure the use of the Report Center functionalities for the following objects, the account must have the SharePoint Administrator role.

SharePoint Online site collections
OneDrive
Microsoft 365 group team sites (The account must also have the Exchange Administrator role, which is required by Auto Discovery for scanning Groups and Teams)

NOTE

If you want to report the Sharing Outside Your Company configuration details and statistics in Configuration Reports, the account must have the SharePoint Administrator role to retrieve the data.

Audit Controller

Audit Controller leverages service account authentication to retrieve user operation information at various object levels: from the site collection to items. By creating plans in the Audit Controller, you can fully customize what data to collect and from where. When creating plans, you can:

Configure Audit Controller rules to either overwrite previous rules or append to those rules if there are overlaps.
Schedule the plans to apply rules and retrieve data or manually apply the rule and retrieve data.

To access functions in the Audit Controller, go to the Settings tab of Report Center, and click Audit Controller on the ribbon.

Complete the steps below to create an Audit Controller plan:

Click Create on the ribbon of the Audit Controller page.
Expand the tree and select the desired sites for this plan to audit. You can also use the Search box above the tree to search for the desired sites.

NOTE
For the selected sites, you can click View Rules to check if any rules have been applied.
What would you like to name this plan? – Enter a plan name and an optional Description for future reference.
Which operations would you like to do with this plan? – Choose the actions you want this plan to perform:
- Apply Rule enables the auditing of the selected actions on the specified SharePoint scope.
- Retrieve Data retrieves the auditing records from SharePoint and stores them in the Auditor database.
The Audit Action field displays the audit record events that will be collected. Due to Microsoft updates, we do not support choosing specific events to audit.
Apply Rule Settings – Configure the operation settings and schedule for applying the audit rules.
- Filter Policy – Designate the specific objects or data you want to filter. Note that the filter policy for applying rules only supports filtering site collections. Click the Add a Filter Level Group link, and then the Site Collection is displayed in the menu. Click Add a Criterion, make selections in the Rule and Condition drop-down lists, and then enter a value in the Value text box.
  
  Repeat this step to create additional criteria. Click the delete () button to delete any of the filter policies.
- In the Operation Settings field, configure how the new rules of this plan are handled when there are already auditing rules configured for the same sites. Select one of the following options from the drop-down list:
  - Overwrite – Overwrite the original audit actions of the specified nodes with the new ones.
  - Append – Append the new audit actions to the existing ones.
- Schedule – Specify the type of schedule to apply the audit rule by choosing one of the following options:
  - No schedule – Apply the rules of this plan manually.
  - Configure the schedule myself – Configure the specific time you want the rules of this plan to be applied. A separate Schedule configuration area appears when you select this option where you can customize the schedule with the following options:
    - Start time – Select the date and time for the rules of this plan to be applied.
      
      *Note: The start time cannot be earlier than the current time.
    - Interval – Enter an integer in the text box and select by Hour(s), Day(s), Week(s), or Month(s). The rules of this plan will be applied repeatedly based on this schedule. Click Calendar View to see the schedules in a calendar.
    - Schedule ending – Designate when to stop applying the rules of this plan. Select No end date for the rules of this plan to be applied repeatedly until you stop it manually. Select End after ___ occurrence(s) to have the job stopped after a defined number of occurrences. Select End by to specify the exact date and time for this rule to stop being applied.
- In the Advanced Rulesfield, specify when you would like to have the audit log for the selected nodes automatically trimmed. Enter a number in the Delete auditor data in SharePoint older than _ days checkbox.
Retrieve Data Settings – Configure the advanced rules and schedule for retrieving the auditing data.
- Would you like to filter the objects whose audit data will be retrieved? – Designate the specific objects or data you want to filter. Click the Add a Filter Level Group link, and then select URL or User from the drop-down menu to specify the audit data you want to retrieve. Click Add a Criterion, make selections in the Rule and Condition drop-down lists, and then enter a value in the Value text box.
  
  Repeat this step to create additional criteria. Click the delete () button if you want to delete any of the filter policies you have configured.
- Advanced Settings – If you are looking to gather information about Microsoft 365 Group, Team, or SharePoint Online site collections, and are willing to improve job efficiency, you can configure the Advanced Settings for data retrieval to exclude the site URL, list URL, and titles from your job reports.
  
  With the Exclude site URLs, list URLs, and titles option selected, we will not retrieve this information from Microsoft 365. Microsoft 365 will receive fewer requests, which will decrease the risk of the 429 throttling issue.
  
  It will give you a high-level view of the audit records for your sites but will not allow you to filter based on this metadata. However, you can still use the URL Filter in the Auditor Reports settings to show reports for a specific site or list, since the URL Filter will filter data from full URLs stored in the Audit database.
  
  NOTE
  If you select the Exclude site URLs, list URLs, and titles option, the List Deletion report will not show any data in the report. If you choose to start collecting this information, later on, there will be no historical data available for your report.
- Schedule – Specify the type of schedule to retrieve auditing data by choosing one of the following options:
  - No Schedule – Retrieve auditing data of this plan manually from the Plan Manager.
  - Configure the schedule myself – Configure the specific time you want to retrieve the plan’s auditing data. A separate Schedule configuration area appears when you select this option where you can customize the schedule with the following options:
    - Start time – Select the date and time for the auditing data of this plan to be retrieved.
      
      *Note: The start time cannot be earlier than the current time.
    - Interval – Enter an integer in the text box and select by Hour(s), Day(s), Week(s), or Month(s). The auditing data of this plan will be retrieved repeatedly based on this schedule. Click Calendar View to see the schedules in a calendar.
    - Schedule ending – Designate when to stop retrieving the auditing data of this plan. Select No end date for the auditing data of this plan to be retrieved repeatedly until you stop it manually. Select End after ___ occurrence(s) to have the job stopped after the defined occurrences you designate in the text box. Select End by to specify the exact date and time for the auditing data to stop being retrieved.
Notification – you can select a previously configured e-mail notification profile, and then click View to access detailed information or click New E-mail Notification to create a new e-mail notification profile. For details on creating an e-mail notification profile, see the User Notification Settings section in the DocAve 6 Control Panel Reference Guide.
Review and edit the configured selections for this plan. Click OK and choose from the following three options in the drop-down list, or click Cancel to leave this page without saving any of your changes:
- Click OK to save the plan. You can view or manage this plan in Plan Manager.
- Click OK and Apply Rule to save the plan, and then apply the configured auditing rule.
- Click OK and Retrieve Datato save the plan, and then retrieve the auditing data.

Configure Export Location

Report Center reports can be exported to datasheets to a predefined export location. The export location can be a storage device or SharePoint Online document library.

Follow the instructions below to configure an export location for the exported reports of Report Center:

Navigate to Control Panel > Export Location.
Click Create on the ribbon. The Export Location tab appears.
Enter a name and an optional description for the export location you are creating.
In the Location Type field, select the Storage option or the SharePoint Online Document Library option for the location you want to use.
- If you select the Storage option, configure the storage information for the storage device that you want to use to store the exported reports.
  - Storage Type – Select a storage type for the export location. The supported storage types are Amazon S3, Amazon S3-Compatible Storage, Box, Dropbox, FTP, Microsoft Azure Blob Storage, Rackspace Cloud File, and SFTP.
  - Storage Type Configuration – Configure the required configurations for the selected storage type. For more information, refer to the Physical Device section in the DocAve Control Panel Reference Guide.
- SharePoint Online Document Library – The reports will be stored in a document library. You can choose to export reports to a certain library or folder or to export reports to each site in the report scope.
  
  NOTE
  Exporting reports to each site only functions when the report scope is site collection level or site level.
  - Specify a document library – Expand the tree and select your desired document library. Document libraries in SharePoint Online site collections, OneDrive, and Microsoft 365 Groups/Teams team sites can all be selected. You can also select a sub-folder in the library as the report location.
  - Each site in the selected scope – Select this option if you want to store the report about each site to the document library in each site accordingly. Enter the document library name you want to use to store the exported report files in the text box. The library will be created on each site in the selected scope.
    
    NOTE
    This configuration only takes effect when you select site collection level nodes or site level nodes to export reports.
Click OK on the ribbon to save your configurations or click Cancel to go back to the Export Location window without saving any configurations.

On this page

#Before You Begin

#Subscription and Licensing Information

#Manage My Settings

#Scan Microsoft 365 Objects

#Required Permissions

#Audit Controller