#Add a Tenant

If an existing customer has tenants that want to use the functionalities of this module, you can add those tenants to the module.

Refer to the following steps to add a new tenant of an existing customer to the module:

1. Click Add tenant in the upper-right corner of the page.

2. Select a customer from the drop-down list.

3. Complete the subscription information for this service:

   • Subscription type – Select the subscription type for this service: Trial or Subscription.

     *Note: For Trial, you can assign up to 5 customers, and the subscription expiration date is fixed. This number is calculated among all premium services.

   • Source – Select a value to indicate the source of your subscription.

   • Payment type – Select the payment type.

   • Tenants – Select the number of tenants you want to assign the subscription.

   • Subscription expiration date – By default, Same as pooled subscription is selected to keep the same expiration date as the pooled subscription. You can select Expire now or select Specify a time to set an expiration date for the customer’s subscription.

   • Contract end date – Click the calendar button and select the contract end date.

4. Click Continue.

5. Select a tenant of the customer.

   If there are no available tenants for the customer, you can click Add new tenant. For detailed instructions on how to add a tenant, refer to Add a Microsoft 365 Tenant.

6. Select a setup method based on your scenario.

   • Modern mode is the recommended mode, which uses AvePoint’s default app, APElements Baseline Management. For the required permissions by the app, refer to the app permissions section in Create a Customer App Profile.

     If the APElements Baseline Management app for the tenant has already been consented, an app consented () icon will appear. Click Save to add the tenant.

     This typically occurs during the process of assigning the Baseline management service to a customer and consenting to the app during the process of onboarding customer or adding services.

     If the APElements Baseline Management app for the tenant needs to be consented, complete the following steps:

     1. Click Authenticate.

     2. The permissions required for this app are displayed. Review the permissions and click Accept.

     3. A page appears indicating that the app was authorized. Close this page, and you will be redirected back to the Add tenant window.

   • Custom app profile is recommended for organizations who have identified use cases with extremely limited required permissions. Instead of using AvePoint’s default app, you can configure the tenant’s custom app and create a custom app profile.

     If the custom app profile for the tenant has already been consented, an app consented () icon will appear. Click Save to add the tenant.

     This typically occurs during the process of assigning the Baseline management service to a customer and consenting to the app during the process of onboarding customer or adding services.

     If the custom app profile for the tenant needs to be consented, you need to create a custom app profile for the tenant.

     Before creating a custom app profile, you must create a custom app with delegated permissions in Microsoft Entra ID, add the API permissions required by Baseline management to the app, and grant admin consent to the app. For the detailed instructions on creating a custom app with delegated permission, refer to . For the required permissions by the app, refer to the app permissions section in Create a Customer App Profile.

     *Note: Redirect URI and ID tokens are required by a custom Azure app with delegated permissions. When editing the Redirect URIs setting, enter the following URL based on your Elements environments:

     Refer to the following steps to create a custom app profile:

     1. Click Authenticate.

     2. Complete the following information on the Create app profile window:

        • App profile name – Enter a name for the app profile.

        • Application ID – Enter the application ID of the application that has been created in Microsoft Entra ID.

        • Certificate file (.pfx) – Click Browse and select your app’s private certificate (the .pfx file).

          *Note: Ensure this .pfx file is paired with the .cer/.crt file uploaded to Microsoft Entra ID when your organization creates this custom app. If your organization does not have any certificates, you can create self-signed certificates by referring to .

        • Certificate password – Enter the password of the certificate.

     3. Click Consent.

     4. Enter the login ID and password of the customer’s Microsoft 365 Global Administrator account, and click Sign in.

     5. The required permissions are displayed. Review the permissions and click Accept.

     6. A page appears indicating that the app was authorized. Close this page, and you will be redirected back to the Add tenant window.

7. Click Save to add the tenant.