Use Nitro
In Elements, Nitro is a place where Administrators can export Microsoft, AvePoint Policies & Insights, and Cloud Backup for Microsoft 365 settings from customers’ tenants into templates and apply the templates to other onboard customers.
*Note: Nitro is not supported for the Microsoft U.S. Government environment.
Before you get started, read the information in Before You Begin to view Microsoft Graph Beta APIs used by Nitro and which settings are supported.
To get started, click Nitro in the navigation pane, and the following actions are available in the Nitro section:
If you are new to Nitro and wondering where to start, refer to the for instructions.
Before You Begin
Read the following information before you get started with Nitro.
API Beta Version Used by Nitro
Nitro in Elements leverages Microsoft Graph beta APIs (the APIs in preview) for some operations that are currently unsupported by version v1.0. The features using the following beta APIs may be affected if Microsoft introduces changes to their beta APIs.
Refer to the table below for the beta version API methods of Microsoft Graph that Nitro uses.
| Feature | API Method | Note |
|---|---|---|
| Microsoft Entra ID | Create group | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Add owners | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Add members | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | List unifiedRoleDefinitions | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Create unifiedRoleAssignment | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | group: assignLicense | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Get group | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | List group members | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | List group memberOf | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Update group | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Create user | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | List directoryRoles | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Activate directoryRole | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Add directory role member | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | List subscribedSkus | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | user: assignLicense | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | List users | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | List user memberOf | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Update user | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | List domains | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Get authorizationPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Update authorizationPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Get identitySecurityDefaultsEnforcementPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Entra ID | Update identitySecurityDefaultsEnforcementPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create targetedManagedAppConfiguration | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | targetApps action | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Update targetedManagedAppConfiguration | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List namedLocations | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create androidManagedAppProtection | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Update androidManagedAppProtection | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create iosManagedAppProtection | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create windowsInformationProtectionPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Update iosManagedAppProtection | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Update windowsInformationProtectionPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List targetedManagedAppConfigurations | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create managedMobileApp | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List managedMobileApps | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List deviceCompliancePolicies | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create defaultDeviceCompliancePolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Update defaultDeviceCompliancePolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | scheduleActionsForRules action | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List androidManagedAppProtections | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List iosManagedAppProtections | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List windowsInformationProtectionPolicies | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List mdmWindowsInformationProtectionPolicies | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Update MdmWindowsInformationProtectionPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List servicePrincipals | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create mdmWindowsInformationProtectionPolicy | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | List notificationMessageTemplates | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create notificationMessageTemplate | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create localizedNotificationMessage | The API method in Microsoft Graph API 4.65.0 version does not support all settings. |
| Microsoft Endpoint Manager | Create deviceManagementIntent | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | updateSettings action | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Create deviceManagementConfigurationPolicy | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Update deviceManagementConfigurationPolicy | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | List deviceManagementIntents | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Get deviceManagementIntegerSettingInstance | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Get deviceManagementIntentAssignment | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | List deviceManagementConfigurationPolicies | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Get deviceManagementConfigurationSetting | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Update deviceManagementIntent | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | createInstance action | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Create deviceManagementScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Create deviceShellScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | List deviceManagementScripts | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Get deviceManagementScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Update deviceManagementScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Update deviceShellScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | List groupPolicyConfigurations | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Create groupPolicyConfiguration | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Update groupPolicyConfiguration | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | List WindowsAutopilotDeploymentProfiles | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Create activeDirectoryWindowsAutopilotDeploymentProfile | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Update activeDirectoryWindowsAutopilotDeploymentProfile | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Create windowsAutopilotDeviceIdentity | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | List deviceShellScripts | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Get deviceShellScript | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | List roleScopeTags | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Create roleScopeTag | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | List mobileApps | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Create mobileApps | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | List managementConditions | The API method is not available in Microsoft Graph API 4.65.0 version. |
| Microsoft Endpoint Manager | Create managementConditions | The API method is not available in Microsoft Graph API 4.65.0 version. |
To view the beta API methods that are used in Policies for Microsoft 365, refer to the .
To view the beta API methods that are used in Insights, refer to the .
To view the beta API methods that are used in Cloud Backup for Microsoft 365, refer to the .
Supported and Unsupported Settings
Refer to the following sections to view the supported and unsupported settings of Nitro.
Microsoft
For some Microsoft modules, not all settings are supported by Nitro. Refer to the table below for details.
| Module | Module | Setting | Supported Properties | Supported Properties | Unsupported Properties |
|---|---|---|---|---|---|
| Microsoft Entra ID | Microsoft Entra ID | User Creation | Name, First Name, Last Name, User Principal Name, Job Title, Department, Company, Usage Location, Licenses, Street Address, State, Office, Country, City, Zip or Postal Code, Mail, Employee ID, License, Role, MailNickname, Block sign in, PasswordProfile.ForceChangePasswordNextSignIn, PasswordProfile.Password | Name, First Name, Last Name, User Principal Name, Job Title, Department, Company, Usage Location, Licenses, Street Address, State, Office, Country, City, Zip or Postal Code, Mail, Employee ID, License, Role, MailNickname, Block sign in, PasswordProfile.ForceChangePasswordNextSignIn, PasswordProfile.Password | The other properties are unsupported. |
| Microsoft Entra ID | Microsoft Entra ID | Group Creation*Note: Only support groups with the Security group type and Assigned membership type. | Membership Type, Group Name, Group Description, Member, License, Role, MailEnabled, MailNickname, SecurityEnabled, Visibility, Microsoft Entra roles can be assigned to the group, Owners | Membership Type, Group Name, Group Description, Member, License, Role, MailEnabled, MailNickname, SecurityEnabled, Visibility, Microsoft Entra roles can be assigned to the group, Owners | The other properties are unsupported. |
| Microsoft Entra ID | Microsoft Entra ID | Self-service Password Reset (SSPR) | The other properties are supported. | The other properties are supported. | On-premises integration |
| Microsoft Entra ID | Microsoft Entra ID | External Collaboration | The other properties are supported. | The other properties are supported. | Self-service sign up |
| Microsoft Endpoint Manager | Microsoft Endpoint Manager | Enrollment | Windows enrollment > Automatic Enrollment, Deployment Profiles | Windows enrollment > Automatic Enrollment, Deployment Profiles | Windows Autopilot Deployment Program > Devices Automatic Enrollment > MDM user scope, MAM user scope Assignments |
| Microsoft Endpoint Manager | Microsoft Endpoint Manager | Compliance Policy | The other properties in Policies are supported. | The other properties in Policies are supported. | Location, Actions for noncompliance, Device Properties, Assignments |
| Microsoft Endpoint Manager | Microsoft Endpoint Manager | Conditional Access | The other properties in Policies are supported. | The other properties in Policies are supported. | Use Conditional Access App Control Assignments > Users and groups > Include/Exclude > Users and groups |
| Microsoft Endpoint Manager | Microsoft Endpoint Manager | Configuration Profile | Only support Administrative Template for Windows 10 or later versions. | Only support Administrative Template for Windows 10 or later versions. | Assignments, Scope tags, Configuration settings |
| Microsoft Endpoint Manager | Microsoft Endpoint Manager | Device Script | The other properties are supported. | The other properties are supported. | Script Frequency, Scope, Assignments |
| Microsoft Endpoint Manager | Microsoft Endpoint Manager | App Protection Policy | The other properties are supported. | The other properties are supported. | Does not support importing Network boundary, Assignments, and Encrypted file extensions. |
| Microsoft Endpoint Manager | Microsoft Endpoint Manager | App Configuration Profile | The other properties are supported. | The other properties are supported. | Profiles of the Managed Device category, Assignments |
| Microsoft Endpoint Manager | Microsoft Endpoint Manager | Security Profile | Security baselines, Endpoint detection and response | Security baselines, Endpoint detection and response | Assignments |
| Exchange Online | Exchange Online | Ransomware Extensions Malware Filter Policy | The other properties are supported. | The other properties are supported. | Applied to |
| Exchange Online | Exchange Online | Remove Files from Mailbox Malware Filter Policy | The other properties are supported. | The other properties are supported. | Applied to |
| Exchange Online | Exchange Online | Top Spamming Countries Spam Filter Policy | The other properties are supported. | The other properties are supported. | Allow list, Block list, Applied to |
| Exchange Online | Exchange Online | Special Language Email Message Spam Filter Policy | The other properties are supported. | The other properties are supported. | Allow list, Block list, Applied to |
| Exchange Online | Exchange Online | Prevent Auto Forwarding Mail Flow Rule | The other properties are supported. | The other properties are supported. | The recipientDLP-related mail flow rules |
| Exchange Online | Exchange Online | Attachment Containing Link Mail Flow Rule | The other properties are supported. | The other properties are supported. | The recipientDLP-related mail flow rules |
| Exchange Online | Exchange Online | Office 365 Message Encryption (OME) Mail Flow Rule | The other properties are supported. | The other properties are supported. | The recipientDLP-related mail flow rules |
| SharePoint Online, OneDrive | Sharing Setting | Sharing Setting | The other properties are supported. | Add a security group | Add a security group |
| Microsoft Teams | Allow Guest Access | Allow Guest Access | Allow guest access in Teams, Make private calls, Allow IP video, Screen sharing mode, Allow Meet Now, Edit sent messages, Delete sent messages, Chat, Use Giphys in conversations, Giphy content rating, Use Memes in conversations, Use Stickers in conversations, Allow immersive reader for viewing messages, LiveCaptionsEnabledType, AllowTranscription | The other properties are unsupported. | The other properties are unsupported. |
| Microsoft Teams | Meeting Policy | Meeting Policy | Name, Description, Meet now in channels,Outlook add-in, Channel meeting scheduling, Private meeting scheduling, Transcription, Cloud recording, Mode for IP audio, Mode for IP video, IP video, Local broadcasting, Media bit rate (Kbs), Screen sharing mode, Allow a participant to give or request control, Allow an external participant to give or request control, PowerPoint sharing, Whiteboard, Shared notes, Let anonymous people start a meeting, Roles that have presenter rights in meetings, Automatically admit people, Allow dial-in users to bypass the lobby, Meet now in private meetings, Live captions, Chat in meetings, Meeting reactions, Engagement report, Store recordings outside of your country or region, Select video filters, Who can register | The other properties are unsupported. | The other properties are unsupported. |
| Microsoft Teams | Channels Policy | Channels Policy | Description, Create private channels | The other properties are unsupported. | The other properties are unsupported. |
| Microsoft Teams | File Storage Options | File Storage Options | Box, Dropbox, Egnyte, Google Drive, Citrix files | The other properties are unsupported. | The other properties are unsupported. |
| Microsoft Teams | Live Event Policy | Live Event Policy | Name, Description, Live events scheduling, Transcription for attendees, Who can join scheduled live events, Who can record an event | The other properties are unsupported. | The other properties are unsupported. |
| Microsoft Teams | Policy | Policy | Name, Description, Create private channels | The other properties are unsupported. | The other properties are unsupported. |
| Microsoft Teams | Messaging Policy | Messaging Policy | Name, Description, Owners can delete sent messages, Delete sent messages, Delete chat, Edit sent messages, Read receipts, Chat, Giphy in conversations, Giphy content rating, Memes in conversations, Stickers in conversations, URL previews, Translate messages, Immersive reader for messages, Send urgent messages using priority notifications, Create voice messages, On mobile devices, display favorite channels above recent chats, Remove users from group chats, Suggested replies | The other properties are unsupported. | The other properties are unsupported. |
Policies for Microsoft 365
To view the supported and unsupported settings for Policies for Microsoft 365, refer to the .
Insights
To view the supported and unsupported settings for Insights, refer to the .
Cloud Backup for Microsoft 365
Backup scope and Backup frequency settings are supported for Cloud Backup for Microsoft 365. Refer to and for details.
*Note: For the backup scope, only the workspace level settings can be applied via the template.
*Note: After the template is applied to a customer, a backup job will start immediately, so the first job will not start at the configured start time of the backup frequency.
Customer App Profiles
Before managing templates of Microsoft settings, you must create app profiles for your customers’ organizations.
For detailed instructions, refer to Manage Customer App Profiles.
On this page