#Add Services

You can add new services for a customer and configure the subscription settings by referring to the instructions below:

1. Select services.

   • Premium management services

     • Workspace management

     • Baseline management

     • User and device management (including the User management and Device management modules)

     • Azure security management

   • Premium management services add-on

     *Note: Add-on services are free to use when certain requirements are met, and no license assignment is needed. Add-on services will expire when all prerequisite service subscriptions expire. Add-on services are enabled by default. If you do not want to include an add-on service for the customer, you must manually disable it.

     • Risk management

       This add-on service will be available when the customer has an active subscription for Baseline management, Workspace management, or Cloud Backup for Microsoft 365.

     • Change management communication

       This add-on service will be available when the customer has an active subscription for any services supported in Elements.

   • Services for Microsoft 365

     • Cloud Backup for Microsoft 365

     • Cloud Backup Express

       *Note: Only Trial subscription is available for Cloud Backup Express.

     • Cloud Backup for Exchange Online & OneDrive

       *Note: Only Trial subscription is available for Cloud Backup for Exchange Online & OneDrive.

     • Cloud Management (includes the Administrator, Content Manager, Replicator, Deployment Manager, Report Center, and Identity Manager modules in DocAve Online)

     • Cloud Archiving (the Archiver module in DocAve Online)

       *Note: Only Enterprise subscription is available for Cloud Archiving.

     • Cloud Governance

     • DocAve Online (includes the Granular Backup & Restore and Exchange Online Backup & Restore modules in DocAve Online)

     • Insights

     • Policies for Microsoft 365

     • Cense

     • Opus

     • tyGraph

   • Services for Google

     • Cloud Backup for Google Workspace

   • Services for Dynamics 365

     • Cloud Backup for Dynamics 365

   • Services for Salesforce

     • Cloud Backup for Salesforce®

   • Services for IaaS + PaaS

     • Cloud Backup for IaaS + PaaS

   • Services for EnPower

     • EnPower

   • Services for migration

     • Fly

2. Click Continue to proceed.

3. On the Licensing page, configure the subscription information service by service.

   There is a Skip for now button for each service, allowing you to cancel adding the service. After clicking it, Skipped will appear.

   • Subscription type – Select the subscription type: Trial or Subscription.

     *Note: When a trial subscription to DocAve Online is added, all the modules will be assigned to the customer automatically.

   • Subscription model – Select the subscription model for the customer.

     *Note: This field only appears while assigning the subscription for Cloud Backup for Microsoft 365, Cloud Backup for Dynamics 365, Cloud Backup for Google Workspace, or Cloud Backup for IaaS + PaaS.

   • Service type – Select the service type for the customer.

     *Note: This field only appears while assigning the subscription for Cloud Backup for Salesforce®.

   • Source – Select a value to indicate the source of your subscription.

     *Note: This field only appears while assigning the Subscription type.

   • Module – Select the module.

     *Note: This field only appears while assigning the subscription for Cloud Backup for Microsoft 365.

   • Payment type – Select the payment type. You can select different payment types when assigning pooled license to customers.

   • Subscription name – Select your subscription name for Fly.

     *Note: This field only appears while assigning a subscription for Fly.

   • Storage – Choose to use the customer’s own storage or AvePoint storage (Microsoft Azure Blob or Amazon S3).

     *Note: This field only appears while assigning the subscription for Azure security management, Cloud Backup for Microsoft 365, Cloud Backup for Exchange Online & OneDrive, Cloud Backup for Dynamics 365, Cloud Backup for Google Workspace, Cloud Backup for IaaS + PaaS, and EnPower.

     *Note: If customers use their own storage for Cloud Backup for Dynamics 365, they must go to the Cloud Backup for Dynamics 365 service to configure custom storage locations. If a customer uses AvePoint storage first and then wants to use a custom storage location for Cloud Backup for Microsoft 365 and Cloud Backup for Dynamics 365, the customer can contact the AvePoint Support Team to migrate the previous backup data from the AvePoint storage location to the custom storage location.

   • Storage profile – Select a storage profile from the drop-down list. If there is no storage profile, click Create a profile to create one. For more information about storage profiles, refer to Manage Storage Profiles.

     *Note: This field only appears while choosing to use the customer’s own storage for Cloud Backup for Microsoft 365 and Cloud Backup for Google Workspace.

   • Retention – If the customer uses AvePoint storage, configure the data retention by choosing one of the following options:

     *Note: This field only appears while assigning the subscription for Cloud Backup for Microsoft 365, Cloud Backup for Dynamics 365, Cloud Backup for Exchange Online & OneDrive, or Cloud Backup for Google Workspace.

     • Retain data for _ years – The data generated within the specific years will be kept.

       *Note: The time to keep data is determined by the subscriptions you purchased from AvePoint.

     • Unlimited retention – All data will be kept without any pruning.

       *Note: This option is available when you assign the trial subscription. For Subscription type, it is determined by the subscriptions you purchased from AvePoint.

   • Add subscription for Microsoft 365 services – While assigning the subscription for Cloud Backup for Microsoft 365, if you have a pooled subscription for Microsoft 365 services, you can click this button to add the Microsoft 365 services subscription for the customer. The following information can be configured additionally:

     • Source – Select a value to indicate the source of your subscription.

     • Package – Select the package of the subscription.

   • Add subscription for Power Platform – While assigning the subscription for Cloud Backup for Microsoft 365, if you have a pooled subscription for Power Platform, you can click this button to add the Power Platform subscription for the customer. The following information can be configured additionally:

     • Type – Select the type for the subscription.

     • Limit – Enter a number to define the limit of the subscription.

   • Available Microsoft 365/Google Workspace licenses – View the number of all Microsoft 365/Google Workspace licenses that the customer's tenant purchased in Microsoft 365/Google Workspace.

   • Assigned Microsoft 365/Google Workspace licenses – View the number of Microsoft 365/Google Workspace licenses that have been assigned to users in the customer’s tenant. AvePoint online services for Microsoft 365/Google Workspace charge the tenant according to this number.

     When adding the Cloud Backup for Microsoft 365/tyGraph service, you can click the Download license details link to download the customer subscription information.

   • Add capacity – While assigning the Subscription Cloud Backup for IaaS + PaaS, if you have a pooled subscription of the Capacity mode (including Azure Virtual Machine, Google VM instance, Azure Storage, and Amazon EC2 modules), you can click this button to add the Capacity subscription for the customer. The following information can be configured additionally:

     • Capacity model – Select the capacity model of the subscription.

     • Purchased capacity for CAP Gateway mode – Enter the purchased capacity for the CAP Gateway mode.

     • Retention – If the customer uses AvePoint storage, configure the data retention by choosing one of the following options:

       • Retain data for _ years/months – The data generated within the specific years/months will be kept.

         *Note: The time to keep data is determined by the subscriptions you purchased from AvePoint.

       • Unlimited retention – All data will be kept without any pruning.

         *Note: If this option is available is determined by the subscriptions you purchased from AvePoint.

     • In the Azure Virtual Machine module, you can configure the subscription settings, and the configurations will also apply to other modules.

   • Add Microsoft Entra ID – While assigning the Subscription Cloud Backup for IaaS + PaaS, if you have a pooled subscription of the user seat mode (including Microsoft Entra ID, Azure AD B2C, and Azure portal settings modules), you can click this button to add the Microsoft Entra ID subscription for the customer. The following information can be configured additionally:

     • Purchased user seats – Enter the purchased user seats of the customer.

     • Retention – If the customer uses AvePoint storage, configure the data retention by choosing one of the following options:

       • Retain data for _ years/months – The data generated within the specific years/months will be kept.

         *Note: The time to keep data is determined by the subscriptions you purchased from AvePoint.

       • Unlimited retention – All data will be kept without any pruning.

         *Note: If this option is available is determined by the subscriptions you purchased from AvePoint.

     • In the Microsoft Entra ID module, you can configure the subscription settings, and the configurations will also apply to other modules.

   • Add subscription for Discovery and Analysis – While assigning the Subscription Opus, if you have a pooled subscription for Discovery and Analysis, you can click this button to add the Discovery and Analysis subscription for the customer. The following information can be configured additionally:

     • Purchased tenant size – Enter the customer's purchased tenant size.

   • Add subscription for Storage Optimization – While assigning the subscription for Opus, if you have a pooled subscription for Storage Optimization, you can click this button to add the Storage Optimization subscription for the customer. The following information can be configured additionally:

     • Subscription model – Select the subscription for the customer, currently only Action and Store model is supported.

     • Purchased optimization capacity – Enter the purchased optimization capacity of the customer.

   • Add subscription for migration – While assigning the subscription for Fly, if you have a pooled subscription for Migration, you can click this button to add the Migration subscription for the customer.

   • Add subscription for Aviator – While assigning the subscription for Fly, if you have a pooled subscription for Aviator, you can click this button to add the Aviator subscription for the customer.

   • Microsoft – While assigning the subscription for tyGraph, if you have a pooled subscription for Microsoft, this section is displayed to add the Microsoft subscription for the customer.

   • Copilot – While assigning the subscription for tyGraph, if you have a pooled subscription for Copilot, this section is displayed to add the Copilot subscription for the customer. You can click the Add subscription for Copilot only button to add the subscription for the customer.

   • Power BI Embedded – While assigning the subscription for tyGraph, if you have a subscription for Power BI Embedded, this section is displayed to add the Power BI Embedded subscription for the customer. If you also have a pooled subscription for Microsoft or Copilot subscription, you can click the Add Subscription for Microsoft and Copilot button to add the subscriptions for the customer.

   • User Seats/Licenses/Objects/Capacity/Tenants – Refer to the table below.

Service	Subscription Type	User Seats/Licenses/Objects/Capacity/Tenant
Baseline management	Trial	No need to assign tenants.
Baseline management	Subscription	Tenants – The number of tenants of the customer that you assign the subscription.
Workspace management	Trial	No need to assign user seats.
Workspace management	Subscription	User seats – If the customer has assigned product licenses in Microsoft 365, the number of user seats will be the same as the number of assigned Microsoft 365 licenses. Otherwise, the newly added license will have one user seat, and the existing license will keep the current number of user seats.
Cloud Backup for Microsoft 365Cloud Backup for Exchange Online & OneDriveCloud ManagementCloud ArchivingCloud GovernanceDocAve OnlineInsightsPolicies for Microsoft 365CenseCloud Backup for Google WorkspaceCloud Backup for Dynamics 365	Trial	N/A
Cloud Backup for Microsoft 365Cloud Backup for Exchange Online & OneDriveCloud ManagementCloud ArchivingCloud GovernanceDocAve OnlineInsightsPolicies for Microsoft 365CenseCloud Backup for Google WorkspaceCloud Backup for Dynamics 365	Subscription	User seats – If the customer has assigned product licenses in Microsoft 365, the number of user seats will be the same as the number of assigned Microsoft 365 licenses. Otherwise, the newly added license will have one user seat, and the existing license will keep the current number of user seats. User licenses – If the customer has assigned Google Workspace licenses to users, the number of user licenses will be the same as the number of the assigned Google Workspace licenses. Otherwise, the newly added service will have one user license, and the existing service will keep the current number of user licenses.
Cloud Backup for Salesforce®	Trial	N/A
Cloud Backup for Salesforce®	Subscription – Basic	Enter the number of user seats that you want to assign to the customer.
Cloud Backup for Salesforce®	Subscription – Standard	Enter the number of user seats that you want to assign to the customer.
Cloud Backup for Salesforce®	Subscription – Premier	Enter the number of user seats that you want to assign to the customer.
Cloud Backup for IaaS + PaaS	Trial	N/A
Cloud Backup for IaaS + PaaS	Subscription	Enter the capacity or number of user seats that you want to assign to the customer.
Fly	Trial	N/A
Fly	Subscription	Objects – Enter the number of global objects that you want to assign to the customer while you assign the Migration subscription.Capacity – Enter the capacity you want to assign to the customer while you assign the Aviator subscription.
EnPower	Trial	Enter the number of user seats that you want to assign to the customer.
EnPower	Subscription	Enter the number of user seats that you want to assign to the customer.
Opus	Trial	N/A
Opus	Subscription	N/A
Cloud Backup Express	Trial	N/A
tyGraph	Trial	N/A
tyGraph	Subscription	User seats – Enter the number of user seats that you want to assign to the customer while you assign the Microsoft subscription. The number of user seats of the Copilot subscription will be the same as that for the Microsoft subscription.Tenant – The number of tenants of the customer while you assign the Power BI Embedded subscription.

4. Click Save and continue.

5. If there are no tenants for the customer, a message will appear, asking you to add tenants for this customer. For detailed instructions on how to add a tenant, refer to Add a Microsoft 365 Tenant.

   *Note: Currently, Elements only supports adding Microsoft 365 tenants. If you want to add Google tenants and Salesforce tenants, you need to go to AvePoint Online Services to complete the operations. For detailed instructions, refer to .

6. On the Permissions page, tenants (tenant name and type) and services you have added for the customer are displayed. Based on the service you selected for the customer, the following methods may be available for authentication:

   • Consent to app – In each service section, the required apps are displayed. If an app for the tenant has already been consented, an app consented () icon will appear. If not, your consent to the app will be required. For detailed instructions, refer to Consent to an App.

   • Create custom app profile – For the following services, you can create custom app profiles. For detailed instructions, refer to Create a Custom App Profile.

     • For Microsoft 365 tenant

       • Cloud Backup for Microsoft 365

       • Baseline management

     • For Google tenant

       • Cloud Backup for Google Workspace

       • Fly

       • Insights

       • Opus

   • Create service account profile – For the following services, you can create a service account profile. For detailed instructions, refer to Create a Service Account Profile.

     • Cloud Backup for Microsoft 365

     • Cloud Backup for IaaS + PaaS

     • EnPower

     • Policies for Microsoft 365

   • Create Google Cloud service account profile – For the Cloud Backup for IaaS + PaaS service, you can create a Google Cloud service account profile. For detailed instructions, refer to Create a Google Cloud Service Account Profile.

   If you want to add a new Microsoft 365 tenant, click Add new tenant. For detailed instructions, refer to Add a Microsoft 365 Tenant. If you want to hide a tenant from the page, you can click Remove tenant.

   Note the following:

   • The custom app profile and service account profile can only be created once for each customer. Make sure all required services have been added for a customer before you create the custom app profile or service account profile for the customer.

   • Multiple app profiles for Elements premium services and AvePoint services (Cloud Backup for Microsoft 365, Policies for Microsoft 365, Insights, and Fly) can be created for a customer. After adding services, you can create additional app profiles for the customer by following the instructions in the Manage Customer App Profiles section.

   • For some services, a message will appear below the app type, indicating that you need to assign the Exchange Administrator or Groups Administrator role to the app in the Microsoft Entra admin center. For detailed instructions, refer to and .

7. Click Continue.

8. On the Overview page, view the customer’s services and their subscription information.

9. Click Finish. If the services you have added for the customer include Cloud Backup for Microsoft 365 or Cloud Backup for Google Workspace, the Finish and start service button will be available, allowing you to start service. For detailed instructions on starting services, refer to Start Services.

#Add a Microsoft 365 Tenant

Complete the following steps to add a Microsoft 365 tenant:

1. Click Add tenants or Add new tenant to open the Add new tenant window.

2. Enter a display name and an optional description for the new tenant.

3. Click Continue.

4. Enter the login ID and password of the customer’s Microsoft 365 Global Administrator account, and click Sign in.

5. The required permissions are displayed. Review the permissions and click Accept.

6. A page appears indicating that your tenant was connected to AvePoint Online Services.

7. Close this page.

#Consent to an App

Complete the following steps to consent to the apps required by a service:

1. Select a service and click Authenticate.

2. For Microsoft 365 tenant, enter the login ID and password of the customer’s Microsoft 365 Global Admin account, and click Sign in.

   For Google tenant, enter the login ID and password of the customer’s Google Super Admin account, and click Sign in.

   For Salesforce tenant, enter the login ID and password of the customer’s Salesforce Super Admin account, and click Sign in.

3. The permissions required by the service are displayed. Review the permissions and click Accept.

4. A page appears indicating that the app was authorized for the service.

5. Close this page, and you will be redirected back to the Permissions page.

#Create a Custom App Profile

Complete the following steps to create a custom app profile for the Microsoft 365 tenant:

*Note: Before you create an app profile for a custom app, make sure you’ve created a custom app with the required permissions. For detailed instructions, refer to .

1. Click Create next to Custom app profile.

2. Complete the following information on the Create app profile window:

   • Custom app type – Azure app is automatically selected.

   • App profile name – Enter a name for the app profile.

   • Application ID – Enter the application ID of the application that has been created in Microsoft Entra ID.

   • Certificate file (.pfx) – Click Browse and select your app’s private certificate (the .pfx file).

     *Note: Ensure this .pfx file is paired with the .cer/.crt file uploaded to Microsoft Entra ID when your organization creates this custom app. If your organization does not have any certificates, you can create self-signed certificates by referring to .

   • Certificate password – Enter the password of the certificate.

3. Click Save to save the configurations.

Complete the following steps to create a custom app profile for the Google tenant:

*Note: Before you create an app profile for a custom app, make sure you’ve created a custom app. For detailed instructions, refer to .

1. Click Create next to Custom app profile.

2. Complete the following information on the Create app profile window:

   • App profile name – Enter a name for the app profile.

   • Admin account – Enter the name of the Admin account that has the User Management Admin and Services Admin roles.

   • Google service account – Enter the service account email address.

     *Note: You can copy the email address when creating the service account. For details, refer to .

   • Private key – Enter the private key.

     *Note: Make sure the private key starts with -----BEGIN PRIVATE KEY----- prefix and ends with the \n-----END PRIVATE KEY-----\n suffix.

3. Click Save to save the configurations.

#Create a Service Account Profile

The service account profile you create must contain a Microsoft 365 account with the permissions required by your customer's cloud services. The service account's permissions vary with the cloud services your customer is using. For detailed instructions, refer to .

Complete the following steps to create a service account profile:

1. Click Create next to Service account profile.

2. Complete the following information on the Create service account profile window:

   • Service account profile name – Enter a name for the service account profile.

   • Description – Enter an optional description.

   • Service – Select at least one service from the drop-down list.

   • Username – Specify an account with the permissions required by the cloud services.

     Note the following:

     • AvePoint does not recommend that a personal active user account be used as the service account. We recommend you use a separate service account to manage all administration.

     • If you run a scan profile to scan SharePoint sites / Microsoft 365 Groups, the specified service account will be automatically added as one of the Term Store Administrators.

     • The specified Microsoft 365 account cannot have multi-factor authentication (MFA) enabled. If the organization has MFA enabled, you can refer to additional details in the following section: .

   • Password – Enter the login password of the account above.

     *Note: The password is validated via the Microsoft 365 API. Due to a limitation of the Microsoft 365 API, you may encounter an issue where the password is deemed invalid here, but can still be used to log into Microsoft 365 successfully. To resolve this issue, change your password in Microsoft 365 and then enter the new password here. For more information about password limitations and requirements, refer to .

3. Click Save to save the configurations.

#Create a Google Cloud Service Account Profile

Complete the following steps to create a Google Cloud service account profile:

1. Click Create next to Google Cloud service account profile.

2. Complete the following information on the Create Google Cloud service account profile window:

   • Profile name – Enter a name for the service account profile.

   • Service – Only Cloud Backup for IaaS + PaaS is available.

   • Service account email – Enter the client email that is included in the JSON file downloaded from the Google Cloud Platform when you create keys for the service account.

   • Private key – Enter the private key that is included in the JSON file downloaded from the Google Cloud Platform when you create keys for the service account.

   • Project ID – Enter the project ID that is included in the JSON file downloaded from the Google Cloud Platform when you create keys for the service account.

3. Click Save to save the configurations.

*Note: For the Service account email, Private key, and Project ID values, refer to the instructions below to create the service account key and download the JSON file.

1. Go to .

2. Click Service Accounts and select the project where your service account has been created.

3. Click your service account, and then click the Keys tab.

4. Click Add key, and then click Create new key from the drop-down list.

   ![Clicking "Add key" and "Create new key".](/en/elements-user-guide/manage-customers/images/image51.png "Clicking "Add key" and "Create new key".")

5. Select the JSON key type and click Create.

6. Open the downloaded file and find the Project ID, Project key, and Client email values.