#Manage Sharing

#Manage Privileged Users

On the Privileged users page, you can manage the users who can manage and share objects in the share center or generate anonymous links to files and folders in projects. All privileged users are listed in the table. You can search specific users by their display names.

To add new users, use one of the following methods:

• Add a user manually – Click Add user, enter part or full of an email address or username in the text box, and then search results are displayed. Select the user that you want to add from the search results.

  Select whether to Send invitation email to the user, select one or both of the following permissions to grant to the user, and click Add.

  • Share center permissions – Select the Manage and share objects in share center option to grant users access to manage files and folders on the My files page of the share center and manage shared permissions on the Manage sharing page.

    NOTE

    Only when this permission is selected will the notification email be sent.

    Then, you can further select the permissions that you want to grant to users:

    • Generate anonymous download link in share center – With this permission, users can generate anonymous download links to files and folders in the share center and share with others.
    • Generate anonymous upload link in share center – With this permission, users can generate anonymous upload links to folders in the share center and share them with others.
    • Generate secure access link in share center – With this permission, users can generate secure access links to files and folders in the share center and share them with others.

    With either the Generate anonymous download link in share center or Generate anonymous upload link in share center granted permission, users can manage shared anonymous links and reusable passwords on the Manage sharing page. With the Generate secure access link in share center permission, users can manage shared secure access links on the Manage sharing page.

  • Project permissions – Select the permissions for projects that you want to grant to the users.

    • Generate anonymous download link in project – Select this option, and users can generate anonymous download links for the files and folders to which they have sufficient permissions in project libraries.

    • Generate anonymous upload link in project – Select this option, and users can generate upload links for the folders to which they have sufficient permissions in project libraries.

  • Anti-virus scan for uploading files – If the Generate anonymous upload link in share center or Generate anonymous upload link in project permission is selected, the Skip anti-virus scan for files greater than 2 GB option will appear. With this permission selected, users can choose whether to skip the anti-virus scan for files that are greater than 2 GB so that those files can be uploaded via folder upload links.

• Import users in bulk – Click the link in the message above the table to download the template, configure the user information and permissions to be granted in the file, and click Import to import the users in bulk.

You can manage the permissions of one or multiple users by selecting them and clicking Manage permissions. Select the permissions you want to grant to the selected users, and click Save to update the granted permissions to the users.

If the invitation has not been sent, you can select the users and click Send invitation email to send the invitation email to the privileged users.

To remove the user permissions, select the users and click Delete.

#How to import users using PowerShell?

You can also add new local users using PowerShell, which facilitates the automation of user management tasks. Please refer to the steps outlined below.

1. Sign in to AvePoint Online Services, and navigate to Administration > App registrations.

2. Click Create to register an app.

3. On the Create app registration panel on the right, complete the following steps:

   1. Enter a name for the app.

   2. Click Add service and permission.

   3. Select the confide.graph.readwrite.all permission under AvePoint Confide to grant to this app, and then click Add.

   4. Credentials enable applications to identify themselves to the authentication service when receiving tokens at a web addressable location (using an HTTPS scheme). For a higher level of assurance, we recommend using a certificate (instead of a client secret) as a credential. Follow the instructions below to configure credentials:

      Select the Certificate tab, and then click Upload new certificate to upload a certificate (.cer or .crt file). The certificate serves as credentials that allow your application to authenticate itself, requiring no interaction from a user at runtime. If your organization does not have any certificate files, you can refer to Prepare a Certificate for the Custom Azure App to prepare a self-signed certificate.

      1. Upload the .crt/.cer file.

      2. Copy the thumbprint for later use.

      3. Install the .pfx on the machine where you will run PowerShell.

         NOTE

         The version of PowerShell must be 5.1 or later.

      Alternatively, select the Client secret tab, click Add client secret, set the Effective duration to 1 year, 2 years, or 3 years, and then click Add to generate a client secret. Client secret values cannot be entirely shown once they are saved. Click the Copy button to copy the client secret value for later use.

4. Click Save to save your configurations.

5. Open PowerShell on your server and choose to run one of the following commands if you register the app by uploading a certificate:

   • $certificate = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 "path_to_pfx_file", "password"

     Replace password with the actual password in the .pfx file.

   • $certificate = (Get-ChildItem -Path 'Cert:\LocalMachine\My\Thumbprint' -Recurse)[0]

     Replace Thumbprint with the certificate thumbprint you copied while registering the app above.

6. Change the ClientID using one of the following commands:

   • Connect-Confide -ClientId 'ClientID' -Certificate $cert -Url 'URL'

     • Replace ClientID with the Application (Client) ID value copied from the App registration detail window of AvePoint Online Services > Administration > App registrations.

     • Replace URL with the Confide public API URL based on your data center.

   • Connect-Confide -ClientId 'ClientID' -ClientSecret 'ClientSecret' -Url 'URL'

     • Replace ClientID with the Application (Client) ID value copied from the App registration detail window of AvePoint Online Services > Administration > App registrations.

     • Replace ClientSecret with the client secret value you copied while registering the app above.

     • Replace URL with the Confide public API URL based on your data center.

   The table below lists the Confide Public API URL of each data center.

   Data Center	URL
   Australia Southeast (Victoria)	https://graph-au.avepointonlineservices.com/confide
   Canada Central (Toronto)	https://graph-ca.avepointonlineservices.com/confide
   East US (Virginia)	https://graph-us.avepointonlineservices.com/confide
   Japan West (Osaka)	https://graph-jp.avepointonlineservices.com/confide
   North Europe (Ireland)	https://graph-ne.avepointonlineservices.com/confide
   Southeast Asia (Singapore)	https://graph-sg.avepointonlineservices.com/confide
   Switzerland North (Zurich)	https://graph-ch.avepointonlineservices.com/confide
   UK South (London)	https://graph-uk.avepointonlineservices.com/confide

7. Run the following command to import users from a .csv file in bulk.

   $taskId = Add-ConfideShareCenterUserImportTask -CsvPath "C:\path\to\your\Import_User_Template.csv"

   Replace C:\path\to\your\Import_User_Template.csv with the full path of the .csv file where you configured the user information.

8. Run the following command to view results of the batch user import.

   Get-ConfideShareCenterUserImportTask -Id $taskId

   Replace taskId with the task ID returned in step 7.

#Configure Sharing Settings

On the Settings page, you can configure the following sharing settings and click Save to save changes.

• Expiration date required – Choose whether an expiration date is required when sharing by clicking the toggle button.

• Expiration date limit – Set limits on the maximum number of days allowed, 10, 30, 60, 90, or Unlimited.

• Enable watermark – Choose whether to enable a watermark. With watermark enabled, users without Edit permission will only be able to view or download watermarked files. For more information on configuring the watermark, refer to Manage Watermarks.

  NOTE

  A watermark is supported for the following file types: PDF, Excel, PPT, and Word.

• Maximum upload size – Configure the maximum upload size for files to be uploaded to the share center.

• Email notification interval – Define the interval for email notifications when there are updates to files or folders in the share center.

• Reusable password - Control whether end users can create reusable passwords and use them in anonymous links. If the setting is turned off, end users can only use random passwords.

#Manage Storage

On the Storage page, you can view all storage sites used by share center, including site title, URL, storage used, created date, and the number of users who use this site to store data for their share center. Clicking the site URL allows you to open the site in a new tab. Click the user count link to switch to the Privileged users page with the corresponding users listed.

To create a new storage site for future share center users, click Create in the upper-right corner. Click Create in the confirmation message to create the new storage site. Users invited to the share center later will start to use this new storage site for the data they manage via the share center.