#AvePoint Online Services User Roles

In AvePoint Online Services, the main user roles are listed below, and different user roles can perform different actions.

• Tenant owner – This is the user whose account is used to sign up for AvePoint Online Services. There is only one tenant owner per AvePoint Online Services tenant. Tenant owner can perform the following actions:

  • Connect tenants from the Microsoft/Google/Salesforce/Amazon platform

  • Access online services (if there are available subscriptions)

  • View subscription information

  • Manage users

  • Manage app profiles

  • Manage service account profiles

  • Manage auto discovery

  • Manage encryption profiles

  • Enable report data collection

  • Export the user activity report

  • Configure notification settings

  • Configure the security settings

  • Configure app registrations

  • Configure general settings

  • Submit feedback

  • Edit personal/organization profile information

  • Invite support

• Service administrator – Service administrators can perform the same actions as the tenant owner. The following user roles can manage service administrators in AvePoint Online Services: tenant owner, service administrators, and customized administrators assigned with the Management permission.

• Customized administrator – In AvePoint Online Services, customized administrators can be assigned the following permissions: Management, Auto discovery, and Administration, and they can only access the functions for which they have been assigned permissions. When customized administrators go to each cloud service, their permissions are the same as the service administrators.

  NOTE

  Customized administrators are limited to actions within their defined permission scope. Key points include:

  • Customized administrators cannot modify permissions for the Tenant owner or Service administrator, nor can they assign other users to these roles.

  • A customized administrator with all permissions can adjust permissions for other customized administrators and can downgrade them to tenant users.

  • A customized administrator with Management permissions can perform actions on tenant users and other customized administrators who also have Management permissions. However, they cannot alter settings for users with higher permissions.

• Tenant user – Tenant users can be standard users or application administrators.

  • Standard users can perform the following actions in AvePoint Online Services:

    • Access online services (if there are available subscriptions)

    • Submit feedback

    • Edit personal profile information

  • Application administrators can:

    • Access online services (if there are available subscriptions)

    • Add tenant users and assign services to them. They can only assign the services for which they are application administrators.

    • Edit tenant users to change available services for them. They can only select the services for which they are application administrators.

    • Submit feedback

    • Edit personal profile information

    • Invite support

  The following user roles can also manage tenant users in AvePoint Online Services: tenant owner, service administrators, and customized administrators assigned with the Management permission.

The role permissions for specific services vary by service. To learn more, go to Add Users for information that is specific to your service.