#Account Management

#Manage Users

Apart from the partner system account (tenant owner), which is the account used to sign up for Elements, you can invite other users into this portal to manage customers, users, roles, and customer groups.

When a user is added to this portal, an invitation email will be sent to the user automatically. Elements provides a default email template. Before adding users, you can customize an invitation email template. For details, refer to Manage Email Templates.

Users with the built-in Administrator role to add users, delete users, and change the tenant owner. To manage users, go to the Settings page, and select Users in the Account management area. The Users page appears. Click All users, Administrators, and other role tabs in the left pane to view the corresponding users.

You can perform the following actions:

• Search – To search for a specific user, enter the keywords of the user’s email address in the search box. Then, press Enter on the keyboard.

• Add users – Click Add new user in the upper-right corner. In the Add user panel, configure the following settings and click Add to add the user.

  • Sign in type – Select the sign in type from the drop-down list.

  • Local user – Enter valid email addresses in the format of someone@example.com.

  • Microsoft 365 User/Group – Microsoft 365 users and groups will become the system’s users. Enter the email address of the user/group in the format of someone@example.com. The system will automatically check whether the users or groups are valid.

  • You can also click the browse () button to view the users or groups within the selected profile, and then select your desired users or groups.

• App profile – This option only appears if Microsoft 365 User/Group is selected as the sign-in method. An app profile is required to add or verify Microsoft 365 users/groups users. Select a previously configured app profile or click New app profile. For more information, refer to Create an App Profile for Microsoft 365.

• Add as an administrator – Select the checkbox to set the user/group as the Administrator.

• Assign roles to the user – Select previously configured roles for the user. For more information about roles, refer to Manage Roles.

After a user is added successfully, the user will receive an invitation email that contains the user ID. The user needs to activate the account and set the password.

• Assign role – To assign roles to a user, click the More actions () button of the user, and select Assign role in the drop-down list. In the Assign role panel, you can select the Add as an administrator checkbox to set the user as an Administrator. Enable the roles you want to assign to the user, and click Save to save your edits. Note that you cannot assign roles to the Tenant Owner and Support accounts.

• Remove role – To remove the role of a user, in the Administrator or any other role tabs, click the More actions () button of the user, and select Remove role in the drop-down list. Note that you cannot remove roles for Tenant Owner and Support accounts.

• Add to role – In the Administrator or any other role tabs, you can click Add existing user to add users to this role. In the panel, search for users by email address, select the users you want to add, and then click Save to add the users.

• Change tenant owner – In the Administrator tab, select the user you want to set as the Tenant Owner, and then click Set as tenant owner. A pop-up window appears asking for your confirmation. Click Confirm to confirm your action. The selected user will be set as the Tenant Owner. After the tenant owner is changed, all users with the Administrator role will receive a notification email about the tenant owner change.

• Delete user – In the All users tab, select one or more users and click Delete. A pop-up window appears asking for your confirmation. Click Confirm to confirm your deletion.

You can also click the More actions () button of a user, and select Delete in the drop-down list. A pop-up window appears asking for your confirmation. Click Confirm to confirm your deletion.

Note that you cannot delete the Tenant Owner and Support accounts.

• Unlock user – If a user enters the wrong password three times, the user account will be locked for one hour. To manually unlock users, select the users with the lock () status and click Unlock.

• Reset MFA settings – If multi-factor authentication has been enabled for local accounts, you can reset MFA settings for them. Select the local users and click Reset MFA settings.

#Manage Roles

A role determines the permissions of its members. This system provides a built-in role Administrator. Users with this role have full control permissions to this system and can manage all customers. You can create custom roles to allow users with the roles to only perform certain actions in the system and to only manage certain customers.

Users with the built-in Administrator role can view role details and create/edit/delete custom roles. To manage roles, go to the Settings page, and select Roles in the Account management area. The Roles page appears with the For partner tab selected.

In the For customer’s end user tab, all permission sets are listed. A permission set works with functional roles to allow customer’s end users to have certain permissions to specific features in Elements.

You can perform the following actions:

• Search – To search for a specific role or permission set, enter the keywords of the role name or permission set name in the search box. Then, press Enter on the keyboard.

• View and edit details – Click a role name or permission set name. The Role details / Permission set details page appears.

• On the Role details page, you can also click the Edit button in each section or tab to edit the role details. Refer to the instructions in Create Roles for details.

• On the Permission set details page, you can view the usage details besides the basic information and permissions.

• Create – Click Create role or Create above the table in each tab, and then refer to the instructions in Create Roles or Create Permission Sets.

• Delete – Select one or more custom roles or permission sets, and click Delete. A pop-up window appears asking for your confirmation. Click Confirm to confirm your deletion.

You can also click the More actions () button of a role, and select Delete in the drop-down list. A pop-up window appears asking for your confirmation. Click Confirm to confirm your deletion.

#Create Roles

To create a role, complete the following steps:

1. Click Create role above the table. The Create role page appears.

2. In the Basic information step, enter a name and an optional description for the role. Then, click Next.

3. In the Permissions step, select the permissions you want to assign to this role. Then, click Next.

• Customers

• View customers – Allows users to view customers.

• Edit customers – Allows users to edit customers.

• Manage subscriptions – Allows users to manage customers’ subscriptions.

• Onboard new customer – Allows users to onboard new customers.

• Report center

• Customer operations report – Allows users to manage the customer operations report.

• Subscription usage – Allows users to manage the subscription usage report.

• Storage consumption report – Allows users to manage the storage consumption report.

• Subscription expiration – Allows users to manage the subscription expiration report.

• System settings

• Feedback management – Allows users to manage feedback.

• Receive email notifications – Allows users to receive email notifications.

• Invite support – Allows users to invite support.

• Baseline management

• View only – Grants users read-only access to this module.

• Manage tenants – Grants users full control over this module, excluding tenant connection/disconnection actions.

• Connect/Disconnect tenants – Allows users to add and disconnect tenants within this module.

• Workspace management

• View only – Grants users read-only access to this module.

• Manage workspaces – Grants users full control over this module, excluding tenant connection/disconnection actions.

• Connect/Disconnect tenants – Allows users to add and disconnect tenants within this module.

• Risk management

• View only – Grants users read-only access to this module.

• Manage tenants – Grants users full control over this module, excluding tenant connection/disconnection actions.

• Connect/Disconnect tenants – Allows users to add and disconnect tenants within this module.

• Change management communication

• View only – Grants users read-only access to this module.

• Manage campaigns – Grants users full control over this module, excluding tenant connection/disconnection actions.

• Connect/Disconnect tenants – Allows users to add and disconnect tenants within this module.

• User management

• View only – Grants users read-only access to this module.

• Manage tenants – Grants users full control over this module, excluding tenant connection/disconnection actions.

• Connect/Disconnect/Initialize tenants– Allows users to add and disconnect tenants within this module. For hybrid tenants, this permission also allows users to initialize tenants.

• Device management

• View only – Grants users read-only access to this module.

• Manage devices – Grants users full control over this module, excluding tenant connection/disconnection actions.

• Connect/Disconnect tenants – Allows users to add and disconnect tenants within this module.

• Marketplace

• View only – Grants users read-only access to this module.

• Manage subscriptions – Grants users full control over this module, excluding tenant connection/disconnection actions.

• Connect/Disconnect tenants – Allows users to add and disconnect tenants within this module.

• Functional roles

• View only – Grants users read-only access to this module.

• Manage roles – Grants users full control over this module.

• Workflows

• View only – Grants users read-only access to this module.

• Manage workflows – Grants users full control over this module.

• Azure security management

• View only – Grants users read-only access to this module.

• Manage tenants – Grants users full control over this module, excluding tenant connection/disconnection actions.

• Connect/Disconnect/Initialize tenants– Allows users to add and disconnect tenants within this module.

4. In the Services step, select the type of access for this role. Then, click Next.

• Tenant user – The role will be the tenant user for customer services. You can also define the role in Cloud Backup for Microsoft 365 and Insights after turning on the toggle.

For Cloud Backup for Microsoft 365, you can select the Custom Security Group option to define delegated permissions for the role.

• Service administrator – The role will be the administrator for customer services.

• No access to customer services – The role cannot access customer services.

5. In the Customers step, choose the customer groups that can be managed by this role. To view the customers included in each customer group, click the number link to the right of the group. You can also select the checkbox to grant access to all customers to this role. Then, click Next.

6. In the Membership step, manage the users with this role.

• Click Add users to add users to this role. In the Add panel, search users by email addresses, select the users you want to add, and click Save.

• Select one or more users and click Delete to delete the user from this role. A pop-up window appears asking for your confirmation. Click Confirm to confirm your deletion.

7. Click Save to save your configurations or click Cancel to go back to the Roles page without saving any configurations.

#Create Permission Sets

To create permission sets that can be selected in functional roles, complete the following steps:

1. Switch to the For customer’s end user tab on the Roles page.

2. Click Create above the table. The Create permission set page appears.

3. In the Basic information step, enter a name and an optional description for the permission set. Then, click Next.

4. In the Permissions step, select the permissions you want to assign to this permission set. Then, click Next.

• Baseline management

• View only – Grants users read-only access to this module.

• Manage tenants – Grants users full control over this module.

• Workspace management

• View only – Grants users read-only access to this module.

• Manage workspaces – Grants users full control over this module.

• Risk management

• View only – Grants users read-only access to this module.

• Manage tenants – Grants users full control over this module.

• Change management communication

• View only – Grants users read-only access to this module.

• Manage campaigns – Grants users full control over this module.

• User management

• View only – Grants users read-only access to this module.

• Manage users – Grants users full control over this module.

• Device management

• View only – Grants users read-only access to this module.

• Manage devices – Grants users full control over this module.

• Functional roles

• View only – Grants users read-only access to this module.

• Manage roles – Grants users full control over this module.

• Marketplace

• View only – Grants users read-only access to this module.

• Manage subscriptions – Grants users full control over this module.

• Workflows

• View only – Grants users read-only access to this module.

• Manage workflows – Grants users full control over this module.

5. Click Create to create the permission set or click Cancel to go back to the Roles page without saving any configurations. To edit basic information of this permission set, click Back.

#Manage Customer Groups

A customer group categorizes customers into different groups. Then, customers can be easily managed in bulk by roles. There are two types of customer groups:

• Static group – You need to manually add users to this group.

• Dynamic group – You can configure specific conditions and users that meet the conditions can be automatically added to this group after sync. If you want to try this feature, contact AvePoint Support to help enable the feature for you.

Users with the built-in Administrator role can create/edit/delete customer groups. To manage customer groups, go to the Settings page, and select Customer groups in the Account management area. The Customer groups page appears.

You can perform the following actions:

• Search – To search for a specific customer group, enter the keywords of the group name in the search box. Then, press Enter on the keyboard.

• View and edit customer group details – Click a group name. The Customer group details page appears displaying the group name, description, rules, and customer details in this group.

• Click the Edit button to edit the group name, description, and rules. Refer to the instructions in Create Customer Groups for details.

• Click the Refresh button to refresh the customer group details.

• Click the Sync button to synchronize the customers to this group.

• Create customer group – Click Create customer group, and then refer to the instructions in Create Customer Groups.

• Sync customers – For dynamic customer groups using custom conditions, you can select the groups and click Sync to sync the customers that meet the configured conditions to this group.

• Delete customer group – Select one or more customer groups and click Delete. A pop-up window appears asking for your confirmation. Click Confirm to confirm your deletion.

#Create Customer Groups

To create a customer group, click Create customer group. The Create customer group window appears.

If you want to create a static group and add users manually, complete the following steps:

1. Enter a name and an optional description for the group.

2. Click Create to create the group. In the confirmation window, click Confirm. You will be directed to the Edit customer group page.

3. Click Add customer. In the Add customer panel, search and select the customers you want to add to this group, and click Add.

4. After adding customers, you can perform the following actions:

• Enter the keywords of the customer’s email address in the search box. Then, press Enter on the keyboard to search for customers.

• Select the customers and click Remove to remove the customers from this group.

If you want to create a dynamic group using custom conditions and add users automatically after this feature is enabled, complete the following steps:

1. Enter a name and an optional description for the group.

2. Select the Dynamically add customers using custom conditions checkbox.

3. Select the Tag, Data center, or Service filters, and configure the conditions to define the users that will be automatically added to this group.

Click Add condition to add more conditions and select the relationships among them.

4. Click Create to create the group. In the confirmation window, click Confirm.