#Add Users

To add users and grant user permissions to AvePoint Online Services and other services, click Add on the User management page. Refer to the information below to configure settings in the Add user pane:

1. Sign-in method – Select a sign-in method from the drop-down list.

   • Local user – The local system will check the user’s credentials.

   • Microsoft 365 user/group – Microsoft 365 users and groups will become AvePoint Online Services users. They can use their Microsoft 365 login IDs to log into AvePoint Online Services.

     NOTE

     To allow added users and group users to sign in to AvePoint Online Services with their Microsoft 365 login IDs, AvePoint recommends that the Microsoft 365 Global Administrator check the Enterprise applications configuration in Microsoft Entra ID > Enterprise applications > Consent and permissions > User consent settings. If the Do not allow user consent option is selected, the Microsoft 365 Global Administrator or Privileged Role Administrator must consent to the AvePoint Online Services app first. For details on consenting to the app by the Administrator, refer to What If Your Tenant Does Not Allow Users to Consent to Apps?

   • Salesforce user – Salesforce users will become AvePoint Online Services users. They can use their Salesforce login IDs to log into AvePoint Online Services.

   • Google user/group – Google users and groups will become AvePoint Online Services users. They can use their Google login IDs to log into AvePoint Online Services.

     NOTE

     Due to Google API limitations, users in the nested Google groups cannot use their Google login IDs to log into AvePoint Online Services.

2. The following options appear according to the sign-in method you’ve selected:

   • Microsoft 365 tenant – This option only appears if Microsoft 365 user/group is selected as the sign-in method. Select a tenant from the drop-down list.

   • Google tenant – This option appears if Google user/group is selected as the sign-in method. Select the tenant of the users you want to add from the drop-down list.

   • Salesforce tenant – This option only appears if Salesforce user is selected as the sign-in method. Select the tenant of the users you want to add from the drop-down list.

     NOTE

     For organizations with a subscription to MyBiz, the Salesforce Sandbox tenant can be listed in the Salesforce tenant drop-down list. If you select a Salesforce Sandbox tenant, you can only add users with the Tenant user role for MyBiz. Salesforce Sandbox users added via this way can only access the MyBiz environment, but they cannot access the AvePoint Online Services environment.

   The tenants in the Microsoft 365 tenant / Google tenant / Salesforce tenant drop-down list are retrieved from Tenant management. For details on connecting tenants, refer to Connect Your Tenants to AvePoint Online Services.

3. Add users – Specify the users that you are about to add to AvePoint Online Services.

   • For Local user, enter valid email addresses in the format of someone@example.com.

   • For Microsoft 365 user/group, you can enter the following:

     • The usernames / email addresses of Microsoft 365 users in the format of someone@example.com.

     • The aliases of Microsoft 365 users.

     • The names / email addresses of Microsoft 365 Groups, mail-enabled security groups, distribution groups, and security groups.

     NOTE

     If the Microsoft 365 username, alias, or group name begins with a special character, you cannot add them to AvePoint Online Services.

   • For Google user/group, you can enter the following:

     • The usernames of Google users in the format of someone@example.com.

     • The display names or email addresses of Google groups.

   • For Salesforce user, enter usernames of Salesforce users in the format of someone@example.com.

   Note the following:

   • If you select Microsoft 365 user/group as the sign-in method, you can specify Everyone. Everyone refers to all available users (excluding external users) in your Microsoft 365 tenant’s Microsoft Entra ID. If you add Everyone as AvePoint Online Services users, all available users can sign in to AvePoint Online Services and perform the corresponding actions according to the assigned role and available products.

   • When you add a security group, distribution group, or mail-enabled security group to AvePoint Online Services, the following users cannot sign in to AvePoint Online Services:

     • The owner of the distribution group or mail-enabled security group.

     • If the security group has nested groups and the owner of a nested group is not a member of any other groups that have been added to AvePoint Online Services, the nested group owner cannot sign in to AvePoint Online Services.

   • Guest users cannot log in to AvePoint Online Services.

   • ReCenter (for Microsoft 365): This service is only supported for Microsoft 365 accounts. If you want to grant permissions to many users, it is recommended to grant permissions to Microsoft 365 Groups instead of Microsoft 365 users.

   • Cloud Backup for IaaS + PaaS: This service is only supported for Microsoft 365 accounts and local accounts.

   • ReCenter (for Google Workspace): This service is only supported for Google users.

   • Confide: This service is only supported for Microsoft 365 accounts and local accounts.

   • EnPower: This service is only supported for Microsoft 365 accounts.

   • tyGraph: This service is only supported for Microsoft 365 accounts.

   • AvePoint Portal Manager: This service is only supported for Microsoft 365 accounts and local accounts.

   • Document Management System Online: This service is only supported for Microsoft 365 accounts.

   • MyHub: This service is only supported for Microsoft 365 accounts.

4. Role – Select the Tenant user, Service administrator, or Customized administrator role.

   NOTE

   For more details about the user roles, refer to AvePoint Online Services User Roles.

5. Assign permissions to users (for Customized administrator) – If you select the Customized administrator role, turn on the toggle of the permission that you want to assign to the users. In AvePoint Online Services, you can assign Management, Auto discovery, and Administration permissions to customized administrators, and they can only access the functions for which they have been assigned permissions. When customized administrators go to each cloud service, their permissions are the same as the service administrators.

6. Assign services and permissions to users (for Tenant user) – If you select the Tenant user role, turn on the toggle of the service that the users can access, and then select the permissions for the users. The services available for selection depend on your subscription. If your subscription for a specific service has expired, the service is unavailable for selection.

Note the following options for specific services:

• Available geo location – If your tenant has Multi-Geo Capabilities in Cloud Backup for Microsoft 365 service, the Available geo location option will appear when you assign the Cloud Backup for Microsoft 365 to users. To maintain segregation among geo locations, select one or more geo locations that will be available to the users.

• Available reports – If you assign the Cloud Insights service to users, the Available reports option appears. Select one or more reports that will be available to the users.

7. Send email notifications to the newly added users and groups (for Microsoft 365 user/group, Google user/group, or Salesforce user) – If you want to send email notifications to newly added users and groups, select this option.

8. Click Save to save your configurations. Users with the sign-in method of Local user will receive invitation emails. They must activate the user IDs first by clicking the link provided in the emails, and then use the user ID and password in the invitation emails to sign in to AvePoint Online Services.