AvePoint Docs
Graph API
My support tickets
Graph API
My support tickets
English

    Home > Microsoft > Connect Your Microsoft Tenant

    Export to PDF

    Connect Your Microsoft Tenant

    To use AvePoint services to manage a tenant in the Microsoft platform, the Tenant Owner or Service Administrators must connect the tenant to AvePoint Online Services at first.

    Connecting a Microsoft 365 tenant will create an app in the environment of the tenant, which requires a Microsoft 365 Global Administrator account within the same tenant to consent to the app. For more information about the required admin consent, refer to Why is Admin Consent Required to Use the AvePoint Apps?

    *Note: If you want to connect a tenant which will be used to , the user consenting to this app must belong to the domain of this tenant, and cannot be an external user.

    To connect a tenant, navigate to Management > Tenant management and refer to the instructions below:

    1. On the Tenant management page, click Connect tenant.

    2. The Connect tenant pane appears on the right of the page. Based on the type of tenant that you want to connect, select the Microsoft platform. In the following scenarios, you also need to provide additional information:

      • Azure environment version – In the AvePoint Online Services production environment for U.S. Government Public Sector, refer to the information below to select a version when you connect a Microsoft 365 tenant:

        • Commercial Microsoft 365 – Select this version if your Microsoft login URL ends with .com.

        • Microsoft 365 U.S. Government – Select this version only if your original onmicrosoft domain ends with .us, not just your custom domain. Most GCC High and DoD organizations should use this option.

    3. Click Connect.

    4. When you connect a Microsoft tenant, the sign in page appears in a new tab. Sign in with an account which meets the requirements mentioned above.

    5. Connecting a Microsoft 365 tenant will create the AvePoint Online Services Tenant Registration for Microsoft365 app in the tenant’s Microsoft Entra ID. The table below lists the permissions required by the AvePoint Online Services Tenant Registration for Microsoft365 app.

    APIPermissionTypePurpose
    Microsoft GraphUser.Read(Sign in and read user profile)DelegatedSupport signing into AvePoint Online Services with Microsoft 365 accounts.
    Microsoft GraphDomain.Read.All(Read domains)ApplicationRetrieve your Microsoft 365 domain information.
    Microsoft GraphGroup.Read.All(Read all groups)ApplicationAdd Microsoft 365 Groups into AOS, and support signing into AOS with Microsoft 365 accounts.
    Microsoft GraphLicenseAssignment.Read.All(Read all license assignments)ApplicationCalculate user seats assigned in your Microsoft 365 tenant.
    Microsoft GraphUser.Read.All(Read all users’ full profiles)ApplicationAdd Microsoft 365 users into AOS, and support signing into AOS with Microsoft 365 accounts.

    2. *Note: You do not need any permissions or Microsoft licenses other than those listed in this guide.

    3. Once your tenant is successfully connected to AvePoint Online Services, a message prompt will be displayed.

    4. Once a Microsoft 365 tenant has been successfully connected to AvePoint Online Services, go to view details of the tenant and edit the SharePoint Online admin center URL value if it is incorrect.