#User Management

The User management module facilitates user and group management. It is primarily designed for Microsoft 365 tenants. To enable user and group management of your on-premises Active Directory through Elements, you must install and configure AvePoint Hybrid Agent Management to your local domain controller devices. This integration enables hybrid tenant functionality, allowing user and group management in both cloud and on-premises environments. For detailed instructions on how to view and manage your on-premises Active Directory users and groups in Elements, refer to Manage Agents.

When adding a new tenant to the user and device management module, you can designate the tenant type: cloud tenant or hybrid tenant. Once a tenant type is defined, it cannot be altered. For a hybrid tenant, you can further to choose the data source for management: Local AD and Microsoft Entra ID or Local AD only. If you choose to focus exclusively on local user management, Elements will automatically exclude cloud users from dashboards and lists to simplify user management. 

On the top of the User management page, you can find the following information:

• User type templates – Displays the number of created user type templates. By clicking View details, you will be redirected to the User type templates page where you can manage user type templates.

• License unit cost profiles – Displays the number of created license unit cost profiles. By clicking View details, you will be redirected to the License unit cost profiles page where you can manage license unit cost profiles.

• AD naming profiles – Displays the number of created AD naming profiles. By clicking View details, you will be redirected to the AD naming profiles page where you can manage AD naming profiles.

• Pending approval – Displays the number of your requests, including the requests pending your approval and the requests of which you are the requester. By clicking View details, you will be redirected to the Pending approval page where you can review and manage the requests. For the detailed instructions on manage requests, refer to License Change Requests.

• Process center – Displays links redirecting to the User deletion queue and Action tracker tabs of the Process center page.

On the tenant highlights part of the User management page, you can find the following information:

• Top 3 tenants with the most risky users – Highlights the 3 tenants with the highest number of risky users. By clicking the number link, you will be redirected to the User management > Users page > All users tab of that tenant, where a list of users with medium risk or high risk is automatically filtered for quick review.

• Top 3 tenants with the most potential cost savings – Highlights the 3 tenants with the highest potential cost savings. By clicking the number link, you will be redirected to the User management > Subscription management page of that tenant, where the license assignments are displayed together with the license unit cost, license cost, and license loss amounts that can be reduced.

• Top 3 tenants with the most guest users – Highlights the 3 tenants with the highest number of guest users. By clicking the number link, you will be redirected to the User management > Users page > All users tab of that tenant, where a list of guest users is automatically filtered for quick review.

• Top 3 tenants with the most Microsoft 365 E3 licenses – Highlights the 3 tenants with the highest number of Microsoft 365 E3 licenses. By clicking the number link, you will be redirected to the User management > Subscription management page of that tenant, where the license assignments are displayed together with the license unit cost, license cost, and license loss amounts that can be reduced.

• Top 3 tenants with the most Microsoft 365 E5 licenses – Highlights the 3 tenants with the highest number of Microsoft 365 E5 licenses. By clicking the number link, you will be redirected to the User management > Subscription management page of that tenant, where the license assignments are displayed together with the license unit cost, license cost, and license loss amounts that can be reduced.

• Top 3 tenants with the most Microsoft 365 Copilot licenses – Highlights the 3 tenants with the highest number of Microsoft 365 Copilot licenses. By clicking the number link, you will be redirected to the User management > Subscription management page of that tenant, where the license assignments are displayed together with the license unit cost, license cost, and license loss amounts that can be reduced.

The tenants table on the User management page displays a comprehensive list of tenants. For quick access, you can search for a tenant by entering the tenant name or the customer’s organization name in the Search text box, and press Enter on your keyboard. Alternatively, you can filter tenants by clicking Filter, selecting filter conditions, and then clicking Apply changes. Additionally, you can switch between pre-configured views to focus on specific columns that suit your needs.

• Tenant – Displays the tenant name together with the customer’s organization name. By clicking a tenant name, the User management page of that tenant will appear, where you can manage users and groups within the tenant.

• Status – Displays the status of the tenant.

  • In progress – When you add the User and device management service and consent app for the tenant, this status will appear.

  • Monitoring – After Elements finishes validating the app in the backend, this status will appear.

  • Expired – When a customer’s subscription for the User and device management service expires, this status will appear.

  • Failed – When Elements attempts to update the tenant information at 00:00 UTC but encounters errors, for example, the app required by the User and device management service was not found, this status will appear.

  • Out of policy – The service subscription of the customer is no longer compliant with policy. Service jobs will be suspended after 15 days, and service reports will no longer be updated. After this grace period, service jobs will be paused, and service reports will no longer be updated.

• Tenant type – Displays the type of the tenant, Cloud only or Hybrid.

• Total users – Displays the number of users within the tenant.

• Potential cost savings – Displays the potential cost savings amount of the tenant.

• License adoption – Displays the license adoption percentage of the tenant.

• Microsoft 365 E3 licenses – Displays the number of Microsoft 365 E3 licenses within the tenant.

• Microsoft 365 E5 licenses – Displays the number of Microsoft 365 E5 licenses within the tenant.

• Microsoft 365 Copilot licenses – Displays the number of Microsoft 365 Copilot licenses within the tenant.

• License cost (monthly) – Displays the monthly license cost amount of the tenant.

• Risk users – Displays the number of users with medium risk or high risk within the tenant. By clicking the number link, the User management page > Users page > All users tab of the tenant will appear, displaying all risky users within the tenant.

• Blocked users – Displays the number of users blocked from signing in within the tenant. By clicking the number link, the User management page > Users page > All users tab of the tenant will appear, displaying all blocked users within the tenant.

• External users – Displays the number of external users within the tenant. This field is applicable exclusively to hybrid tenants. By clicking the number link, the User management > Users page > External users tab of the tenant will appear, displaying all external users within the tenant.

• Deleted users – Displays the number of deleted users within the tenant. By clicking the number link, the User management > Users page > Deleted users tab of the tenant will appear, displaying all deleted users within the tenant.

• Service accounts – Displays the number of external users within the tenant. This field is applicable exclusively to hybrid tenants. By clicking the number link, the User management > Users page > Service accounts page of the tenant will appear, displaying all service accounts within the tenant.

• Guest users – Displays the number of deleted users within the tenant. By clicking the number link, the User management > Users page > Guest users tab of the tenant will appear, displaying all guest users within the tenant.

• Last updated time – Displays the time when the tenant information was updated.

• AD naming profile – Displays the AD naming profile applied to the tenant. This field is applicable exclusively to hybrid tenants.