#Manage Users

The following user roles can manage users in AvePoint Online Services: tenant owner, service administrators, and customized administrators assigned with the Management permission. For more details about the user roles, refer to AvePoint Online Services User Roles.

To manage AvePoint Online Services users, navigate to Management > User management. On the User management page, refer to the following instructions to manage users/groups:

• Add – Click Add and refer to the instructions in the Add Users section.

• Edit – Select one user and click Edit. Then, refer to the instructions in Edit User Permissions.

• Delete – Select one or multiple users, and then click Delete. In the confirmation window, click Confirm. All selected users and related data will be deleted.

• Set as tenant owner – Select a service administrator in the Activated status, and then click Set as tenant owner. In the confirmation window, click Confirm. The email notification will be sent to the new tenant owner and the original tenant owner.

• Reset MFA – This is available for organizations which has enabled the MFA policy for local accounts setting in Administration > Security. If a user needs to reconfigure their MFA settings, such as when switching to a new device, select the user's local account, ensure it is in the Activated status, and then click Reset MFA.

• Enable MFA / Disable MFA – If your organization has enabled the MFA policy for local accounts setting in Administration > Security, you can select Activated local users and choose to Enable MFA / Disable MFA for them.

  • If you select local users with MFA disabled and click Enable MFA, these users need to configure MFA when they sign in to AOS the next time.

  • If you select local users with MFA enabled and click Disable MFA, these users do not need to configure MFA when they sign in to AOS the next time.

  

  

• Deactivate – Select one or multiple users in the Activated status, and then click Deactivate. Deactivated users are not removed from AvePoint Online Services but are restricted from accessing AvePoint Online Services.

• Activate – Select one or multiple users in the Deactivated / Not activated status, and then click Activate.

• Unlock – If a user enters an incorrect password consecutively more than three times, the user account will be locked for an hour. Instead of waiting for the system to automatically unlock the account after an hour, tenant owner and service administrators can manually unlock the account. To unlock an account, select the account and click Unlock.

• Filter – Set a filter to view users and groups by referring to the instructions below:

  1. Click Filter on the upper-right corner of the page. The Filter pane appears on the right of the page.

  2. In the Filter pane, configure conditions for the Role, Service, Sign-in method, or Geo location criteria.

     NOTE

     The Geo location criterion is only available when your tenant has Multi-Geo Capabilities in Cloud Backup for Microsoft 365 service.

  3. Click Apply.

Note the following:

• Logged-in tenant owner and service administrators cannot edit, deactivate, or delete their own accounts.

• Application administrators can only add/edit tenant users and manage available services for which they are application administrators.

• Logged-in application administrators cannot edit their own accounts.

• To manage the security settings for users in your AvePoint Online Services tenant, refer to Configure Security Settings.