#About AvePoint Cloud Management

AvePoint Cloud Management is a complete toolkit for Microsoft 365 management and administration, allowing you to manage, move, and maintain your business-critical Microsoft 365 content. AvePoint Cloud Management simplifies Microsoft 365 management and administration for SharePoint Online, OneDrive, and Microsoft 365 Groups.

AvePoint Cloud Management provides the following modules:

• Administrator

• Content Manager

• Deployment Manager

• Replicator

• Report Center

• Identity Manager

AvePoint Cloud Management supports the following languages: English, French, and Japanese.

#Complementary AvePoint Cloud Services

The AvePoint Cloud Governance service in the AvePoint Online Services platform empowers end users with self-service provisioning and content management under control. AvePoint Cloud Management can work with AvePoint Cloud Governance to provide advanced management for the auto-provisioned site collections and sites.

• Policy Enforcer

  Includes site collections created via AvePoint Cloud Governance requests in a Policy Enforcer profile upon site collection provisioning. All actions and changes to the site collections are continuously monitored, and policy violations can be automatically resolved. For details on the related AvePoint Cloud Governance features, refer to the Cloud Governance Administrator Guide.

• Deployment Manager

  • Deploys design elements or solutions to site collections created via AvePoint Cloud Governance requests. For details on the related AvePoint Cloud Governance features, refer to the Cloud Governance Administrator Guide.

  • Deploys design elements to sites created via AvePoint Cloud Governance requests. For details on the related AvePoint Cloud Governance features, refer to the Cloud Governance Administrator Guide.

    Note that custom scripts are blocked on site collections by default for security reasons. When a Deployment Manager job is executed, Cloud Management will automatically enable the custom scripts setting on the destination site collections and will disable it once the job is completed.

• Report Center

  Includes site collections created via AvePoint Cloud Governance requests in an Audit Controller plan upon site collection provisioning. Events in the site collections are recorded and collected so you can generate and view Auditor Reports in AvePoint Cloud Management Report Center. For details on the related AvePoint Cloud Governance features, rrefer to the Cloud Governance Administrator Guide.

If you would like to obtain a subscription for AvePoint Cloud Governance, contact your AvePoint account manager.

#AvePoint Cloud Management Versions: Insider and Production

There are two versions of AvePoint Cloud Management: a version for preview features and a version for generally available features.

The Insider version was created for users who want to see and test new product features before they are generally available in your production tenant. If you would like to join the AvePoint Cloud Management Insider program, contact your AvePoint account manager to purchase the subscription. When you are ready to access the AvePoint Cloud Management Insider environment, make sure you have a non-production Microsoft 365 tenant, and use this test tenant in the Insider environment.

The production version has two environments: an environment for commercial use and an environment available on Microsoft’s Cloud Platform for the U.S. Government.

All versions and environments are covered in this guide. Refer to the details below for differences.

• Sign-in address

  • Insider environment - https://insider.avepointonlineservices.com

  • Commercial Production Environment - https://www.avepointonlineservices.com

  • U.S. Government Production Environment - https://usgov.avepointonlineservices.com

• Sign-in method

  • Insider environment

    • Local account

    • Microsoft 365 account

  • Commercial Production Environment

    • Local account

    • Microsoft 365 account

  • U.S. Government Production Environment

    • Local account

    • Microsoft 365 account

    • Microsoft 365 U.S. Government account

• Supported data centers

  • Insider environment

    • East US (Virginia)

    • North Europe (Ireland)

  • Commercial Production Environment

    • Australia Southeast (Victoria)

    • Canada Central (Toronto)

    • East US (Virginia)

    • France Central (Paris)

    • Germany West Central (Frankfurt)

    • Japan West (Osaka)

    • North Europe (Ireland)

    • Southeast Asia (Singapore)

    • Switzerland North (Zurich)

    • UK South (London)

    • West Europe (Netherlands)

  • U.S. Government Production Environment

    • US Gov Virginia (Virginia)

#Supported Browsers

The following table outlines the required browser versions to support AvePoint Cloud Management.

Browser	Version
Internet Explorer	IE 11*
Microsoft Edge*	The latest version
Microsoft Edge based on Chromium	The latest version
Google Chrome	The latest version
Mozilla Firefox	The latest version
Safari for Mac	The latest version

#Supported Concurrent Jobs

AvePoint Cloud Management can support a maximum of five concurrent jobs for a tenant. These five jobs can run concurrently from different products within AvePoint Cloud Management.

#Invite Support

For help using AvePoint Cloud Management, a Power User can invite a member of AvePoint Support to access their AvePoint Cloud Management session to help troubleshoot. To do this, complete the following steps.

1. Log into AvePoint Cloud Management and click Invite Support at the top-right of the window. A pop-up window appears.

2. On the Invite Support window, provide the following information:

   1. Invite Support – Provide the product, issue type, severity, and details about your issue. Give as much detail as possible.

      • Product – Select the product type related to your issue from the drop-down list.

      • Issue Type – Choose General guidance if you want to get general help using AvePoint Cloud Management; choose Troubleshoot an issue if you want to invite support to help you troubleshoot a problem with AvePoint Cloud Management.

      • Severity – Define the severity of the issue by selecting a level on the scrollbar (1=Trivial, 5=Critical).

      • Details – Enter detailed information about your issue in the text box, such as how often the issue appears, what process the issue affects, and what actions were performed before the issue appears. The content of the detailed information cannot exceed 255 characters.

        If the issue is related to a particular job, enter the corresponding Job ID in the text box. To add multiple Job IDs, separate the Job IDs with a semicolon.

      • Attachment – If you have a file that will help explain or resolve your issue, click Browse and select your file. The maximum file size is 5 MB.

      • Contact Name – Enter your name in the text box.

      • Contact Option – If you choose Email, enter your email address in the text box; if you choose Phone, enter your phone number in the text box.

      • Additional Email Recipients – A notification email will be sent to you after the Invite Support request is submitted. You can add additional email recipients who will receive a copy of the email. If you want to enter multiple email addresses, separate them with a semicolon (;).

      • Would you like AvePoint Technical Support to attempt to fix this issue? – According to your security policy, choose whether to create a temporary account to allow technical support to access your Cloud Management environment to resolve the issue:

        • Yes, create a temporary account to allow a limited scope of plans and objects to attempt to resolve the issue. – After you invite support for assistance, a temporary account will be automatically created in AvePoint Online Service. The temporary support account will be deleted in 15 days. Note that this option is only available when your Service Administrator allows temporary account creation for AvePoint Technical Support.

        • No, only notify AvePoint that there is an issue and I will provide additional details to assist in troubleshooting. – If you do not want to create a temporary account for technical support to access your Cloud Management environment, select this option. Then, click Submit and you do not need to configure the plan and object scope in the following steps.

        If this field is not available to you, it indicates that your service provider is responsible for your support ticket and a support representative will reach out to you. Click Submit and you do not need to configure the plan and object scope in the following steps.

   2. Plans – Share plans with the Support user by selecting the checkboxes below the Access column for the specified plans.

      On the current page, you can also filter the plans by the keyword. The keyword must be contained in the value of the Plan Name, Description, Product, or Created By columns. Enter the keyword for the plans you want to display in the Input Keyword text box and then click the magnifying glass button to search. You can select Search all pages or Search current page to define the search scope. Search all pages means that the plans in all pages whose columns contain the keywords will be displayed, while Search current page means that only the plans in the current page whose names and descriptions contain the keywords will be displayed. The search function is not case-sensitive.

      Click Next when you finish the configurations.

   3. Managed Site Collections/Mailboxes – Share the desired managed site collections by selecting the checkboxes below the Access column for the specified managed site collection.

      • Managed site collections represent the site collections registered to object containers and managed by AvePoint Cloud Management.

      • The Support user with Access permission for the site collections can manage the site collections in your AvePoint Cloud Management environment.

      Click Next when you finish the configurations.

   4. Overview – Provide an overview of the issue description and the shared managed site collections and plans.

3. Click Submit to finish the invitation process. AvePoint Support will receive an email notification to inform them that they are invited to help solve customer issues.

#FAQs

What If Your Tenant Has Blocked Apps That Don’t Use Modern Authentication?

If your tenant has the security policy to block access from unmanaged devices, your tenant will block access from apps that don’t use modern authentication because some third-party apps and previous versions of Office that don’t use modern authentication cannot enforce device-based restrictions.

When your tenant uses the service account authentication method to scan objects in AvePoint Online Services Auto Discovery, by default, Cloud Management uses basic authentication to run jobs. If your tenant has blocked access from apps that don’t use modern authentication, Cloud Management jobs using a service account will use modern authentication for data management. When this occurs, the data and functionality support status of modern authentication for the service account will be the same as app profile authentication. You can refer to the App Profile Support Status column in Unsupported SharePoint Online Data Types and Supported and Unsupported Functionalities for the details.

• Real-time replication in the Replicator module

• The following features in the Identity Manager module: assign or unassign roles to users when editing users in Manage Users; the Microsoft 365 Group Creation and Mailbox Archiving rules in Policy Enforcer; all features related to mailbox management

• The Auditor Controller in the Report Center module

What If Your Tenant Still Uses a Service Account with MFA Enabled?

Microsoft is discouraging the use of basic authentication and is deprecating its usage. Microsoft has already disabled its use with Exchange Online. Cloud Management is migrating away from legacy basic authentication support and strongly recommends you switch to using conditional access policies.

When your tenant uses the service account authentication method to scan objects in AvePoint Online Services Auto Discovery, Cloud Management uses the service account to run jobs. If the service account has MFA enabled, the following features will not work smoothly.

• Administrator > Policy Enforcer

  • The Include the Active Directory group members feature in the Site Collection Administrator Restriction and User/Group Restriction rules

  • Email notification – Cloud Management cannot retrieve the recipient’s preferred language set in Microsoft 365. The email content will be in English.

• Administrator > Security

  • Search for external users via the people picker

  • Include members of Active Directory groups in the search results

  • Deactivated account cleaner

• Report Center > Administration Reports

  Cloud Management cannot retrieve the following information:

  • Microsoft Entra group members

  • Microsoft Entra group properties

  • User properties

What If Your SharePoint Domain Name Has been Changed?

It is now possible to change the SharePoint domain name for your organization in Microsoft 365 as introduced in this Microsoft article: Change your SharePoint domain name. This change will affect SharePoint sites, Microsoft 365 Group team sites, and OneDrive sites.

If your Auto Discovery scan profile has no schedule configured and the scan job is manually run, you will need to manually run a new scan job after your SharePoint domain name is changed. The new scan job will obtain the new URLs of SharePoint sites, Microsoft 365 Group team sites, and OneDrive sites, and then synchronize the new URLs to Cloud Management. The synchronization time varies with the data size. It can take five minutes or up to one hour to finish the synchronization.

If your Auto Discovery scan profile uses a domain name in the scan rule for Microsoft 365 Groups to scan the corresponding group team sites, you will need to update the domain name in the scan rule.

The domain change will affect your configurations and data in Cloud Management. Refer to the sections below for the details.

#Reassign standard users’ permissions to objects

In Control Panel > Account Manager, plans/profiles are assigned to standard users so they can manage the corresponding plans/profiles, including all objects or specific objects in the plans/profiles. After the new URLs of SharePoint sites, Microsoft 365 Group team sites, and OneDrive sites are synchronized to Cloud Management, you need to reassign standard users’ permissions to the objects.

#Reselect the objects in your plans/profiles

Your previously configured plans/profiles contain SharePoint sites/Microsoft 365 Group team sites/OneDrive sites or the objects within the sites. After the new URLs of the objects are synchronized to Cloud Management, you need to edit the plans/profiles, refresh the data tree, and then reselect the objects.

After saving changes to the plans/profiles, you can manually run new jobs. If the plans/profiles have the schedule configured, the updates will take effect in the next scheduled job.