- Article
- 9 minutes to read
Appropriate roles: Account admin | Global admin | User management admin
You determine the access your users have to Partner Center by the roles you assign to them. Each program has roles specific to the business it relates to. For example, if your business is a Cloud Solution Provider (CSP) business, your users need roles specific to the CSP program, not just standard Microsoft Azure Active Directory (Azure AD) tenant management roles such as global admin.
Azure AD tenant roles and non-Azure AD roles
- Azure AD tenant roles include global admin, user admin, and CSP roles.
- Non-Azure-AD roles are roles that don't manage the tenant. They include business profile admin, referral admin, incentive admin, incentive user, and MPN (Microsoft Partner Network) partner admin.
User roles, permissions, and workspace access
Nine tables in this article list Partner Center user roles, the permissions granted by those roles, and the workspaces those roles have access to.
The tables are:
Manage CSP commercial transactions in Partner Center (Azure AD and CSP roles)
Manage MPN membership and your company
Manage referrals
- Scope of referrals
Manage incentives
(Video) Account Settings: User Roles and PermissionsView Partner Center insights data
Control panel vendor
See AlsoExample of a Nursing Interview Thank-You Letter (Template) - Nurse Money Talk¿Qué son las palabras clave y por qué necesitas elegir la adecuada?Exploited-mom.com ▷ exploited-mom.com - exploited mom Resources and Information. - HypeStatChinese Heroine Gang Raped By Japanese Soldiers Uses Super Move - chinaSMACKGuest users
Help + support
This article doesn't describe all roles, such as roles in the Microsoft marketplace and roles with privileges for various GDAP capabilities.
Note
The Owner role is assigned to the user who enrolled in the program and can't be modified. If you need to change the Owner, create a support ticket.
Manage CSP commercial transactions in Partner Center (Azure AD and CSP roles)
This table lists the Azure AD and CSP roles you can assign to users. It also shows the workspaces and other access granted with those user roles.
| Workspace | Level of access | User Role | Learn more |
|---|---|---|---|
| Customers | Customer management | Admin agent | Connect with your customers |
| Customers | View all partner profiles | User management admin | |
| Customers | Request a relationship with a customer | Sales agent * | |
| Customers | View the customer agreement | Sales agent * | |
| Pricing | View agreements, price lists, and offers | Global admin | |
| Pricing | View pricing and offers | Admin agent | |
| Pricing | View pricing and offers | Sales agent * | |
| Account settings | Can access all Microsoft account/services with full privileges | Global admin | Manage your Partner Center account |
| Account settings | View, create, and manage all partner users | Global admin | Create user accounts and assign roles. Only a Global admin can reset a password for a global admin. |
| Account settings | Add device list to the Partner Center | Admin agent | |
| Account settings | Create and apply profiles to devices | Admin agent | |
| Account settings | Subscription management | Admin agent | |
| Account settings | Request delegated administrator privileges | Admin agent | |
| Account settings | Administer on behalf of a customer | Admin agent | |
| Account settings | Register a value-added reseller | Admin agent | |
| Account settings | Add device list to the Partner Center | Sales agent * | |
| Account settings | Subscription management | Sales agent * | |
| Account settings | Enroll a value-added reseller | Sales agent * | |
| Account settings | View my profile | Default user | Link or unlink a Microsoft Certification profile ID (MCID) to a Microsoft Partner Network (MPN) account Reset your password |
| Billing | View, create, and manage billing, invoices, and recon files | Global admin | |
| Billing | Billing | Admin agent | |
| Billing | View, create, and manage billing, invoices, and recon files | Billing admin | Read your bill |
| Billing | View pricing | Billing admin | |
| Billing | Manage subscriptions and billing issues on behalf of customers | Helpdesk agent | |
| Billing | Customer management | Sales agent * | Provide billing support for your customers and help answer their billing questions |
| Referrals | Manage customer leads | Sales agent * |
Note
* The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.
Return to top
Manage MPN membership and your company
This table lists the roles you can assign to users so they can view and manage memberships, competencies, programs, and benefits in Microsoft Partner Network (MPN). It also shows the workspace access granted with those user roles.
| Workspace | Level of access | User Role | Learn more |
|---|---|---|---|
| Membership | View, create, and manage partner service requests | MPN partner admin | |
| Membership | View user details and their skills data | MPN partner admin | Skills report in Partner Center |
| Membership | View competencies | MPN partner admin | Differentiate your business by attaining Microsoft competencies |
| Membership | View and purchase MPN offers | MPN partner admin | Buy or renew a Microsoft Action Pack subscription or silver and gold competencies |
| Membership | View MPN offers order history and invoices | MPN partner admin | |
| Membership | View partner contribution indicator data | MPN partner admin | |
| Membership | Can work in the Voucher Validation tool | MPN partner admin | |
| Benefits | View and manage benefits | MPN partner admin | |
| Benefits | View, create, and manage users | User management admin | Manage your Microsoft Partner Network membership benefits and offers in Partner Center |
| Account settings | Add locations | Account admin | Manage locations |
| Account settings | Manage profiles related to the accounts you're the admin for | Account admin | |
| Account settings | Assign roles for users in tenant to non-Azure-AD roles | Account admin | |
| Account settings | View legal, company, business, and MPN profiles | MPN partner admin | Verify your company profile |
| Account settings | View other user roles within company, but can't assign roles | MPN partner admin | |
| Account settings | Enroll locations into programs | Account admin | |
| Insights | View customer data analytics | MPN partner admin |
Return to top
Manage referrals
This table lists roles you can assign to users so they can create, manage, edit, assign, register, or view in the Referrals workspace. (See Scope of referral roles in the next table for the scope of deals that Referrals users can make.)
| Workspace | Level of access | User Role | Learn more |
|---|---|---|---|
| Referrals | Create and manage everything under Referrals tab in Partner Center | Referrals admin | Manage Co-sell opportunities |
| Referrals | Can view and edit all the co-sell opportunities and leads | Referrals admin | |
| Referrals | Can assign team members for a deal | Referrals admin | |
| Referrals | Can view and edit business profiles | Referrals admin | |
| Referrals | Can view and register deals for opportunities that are marked as won and eligible for deal registration | Referrals admin | |
| Referrals | Create and manage co-sell opportunities only if they're a part of the team | Referrals user | Manage Co-sell opportunities |
| Referrals | Can create co-sell opportunities for the locations where they're assigned the role. | Referrals user | |
| Referrals | Can view and register deals for opportunities that are marked as won and eligible for deal registration if they're team member. | Referrals user | |
| Referrals | Create and manage business profiles | Business profile admin | Manage business profiles |
Return to top
Scope of referral roles
This table shows the scope of deals that users with Referrals privileges can make.
| Workspace | Scope | What you can do |
|---|---|---|
| Referrals | Entire company | Both admins and users have access to create deals for any location in their company. |
| Referrals | Referral admin has access to view and edit all the deals. | |
| Referrals | Referral users have access to view and edit all the deals only if they're a part of the team. | |
| Referrals | One or more locations | Both admins and users have access to create deals for the assigned location in their company. |
| Referrals | Referral admin has access to view and edit all the deals belonging to the assigned locations. | |
| Referrals | Referrals users have access to view and edit all the deals belonging to the assigned locations if they're part of the team. |
Return to top
Manage incentives
This table lists roles you can assign to users so they can initiate, manage, edit, dispute, or view in the Incentives workspace.
| Workspace | Level of access | User Role | Learn more |
|---|---|---|---|
| Incentives | Initiates and manages incentives | Incentives admin | Use these resources to help you get started with incentives |
| Incentives | Can view and edit all aspects of incentives programs | Incentives admin | |
| Incentives | Can view and edit bank and tax details | Incentives admin | |
| Incentives | View rebate and co-op earnings | Incentives admin | |
| Incentives | Dispute incentives payments | Incentives admin | |
| Incentives | Can view incentives programs | Incentives user | |
| Incentives | Can view and initiate incentives claims | Incentives user | |
| Incentives | View rebate and co-op earnings | Incentives user |
Return to top
View Partner Center Insights data
This table lists roles you can assign to users so they can access, view, and create data about your customers and their purchases in the Insights workspace.
| Workspace | Level of access | User Role | Learn more |
|---|---|---|---|
| Insights | View customer data analytics | MPN partner admin | |
| Insights | Access to all reporting datasets, create partner support tickets, view partner support tickets you create | Executive report viewer | Overview dashboard reports available in Partner Center Insights |
| Insights | Access to data reports with exception of revenue and customer and employee personal data, create partner support tickets, view partner support tickets you create | Report viewer |
Return to top
Control Panel Vendor
This table shows the roles with access to Control Panel Vendor (CPV) capabilities.
A Control Panel Vendor (CPV) is an independent software vendor that develops applications for use by CSP) partners to enable them to integrate their systems with Partner Center APIs. A Control Panel vendor isn't a CSP Partner with direct access to the Partner Center dashboard or Partner Center APIs.
| Workspace | Level of access | User Role | Learn more |
|---|---|---|---|
| Account settings | View and manage your CPV profile | Global admin | Enroll as a Control Panel Vendor to help integrate CSP partner systems with Partner Center APIs |
| Account settings | View and manage any of your users who need access to CPV capabilities | Global admin |
Return to top
Guest user
A user can be added as a guest on the Azure AD tenant. Their access to Partner Center capabilities depends on the role they're assigned by the admin on the Azure AD tenant.
| Guest user | User Roles |
|---|---|
| MPN partner admin | |
| Business profile admin | |
| Referrals admin |
Note
To access, view, or manage an MPN account, a guest user must have the Global admin or MPN partner admin role. (Otherwise, they will see the message, "Access denied. Please contact your company’s global admin and ask them to grant you the appropriate access permissions.")
Return to top
Help + support
This table lists roles you can assign to users, and the level of help and support that they can create, view, access, or provide.
| Workspace | Level of access | User Role | Learn more |
|---|---|---|---|
| Help + support | Create support tickets for Partner Center. View partner support tickets that you create. | Global admin, Account admin, Helpdesk agent, MPN partner admin, Incentives user, Admin agent, User management admin, Billing admin, Referrals admin, Referrals user, Business profile admin, Sales agent (The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.) | |
| Help + support | View support tickets | Sales agent (The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.) | |
| Help + support | Access support | Incentives admin | |
| Help + support | Service health and service requests for customers | Admin agent | |
| Help + support | Search for and view a customer | Helpdesk agent | Escalate problems to Microsoft and learn which issues are more-suited to Microsoft escalation |
| Help + support | Edit customer details | Helpdesk agent | |
| Help + support | Help resolve customer issues with billing or subscription management | Helpdesk agent | |
| Help + support | Request support on behalf of customers | Helpdesk agent |
Return to top
Next steps
Read the following articles for more information about roles and permissions.
- Assign user roles and permissions for Microsoft marketplace
- Set roles or custom permissions for account users for Windows and Xbox
- Create user accounts and assign roles and permissions
- Verify your account information when you enroll in a new Partner Center program
FAQs
How do you assign User roles? ›
To assign a user to a user role
In the Edit User Role dialog box, click Users. On the Users page, click Add. In the Select Users or Groups dialog box, type the name of a user or group that you want to add to this user role, click Check Names, and then click OK. In the Edit User Role dialog box, click OK.
- Click the settings cog in the top right and select “User Management”
- Select the user you want to use from the list.
- Set the permission for “Assists your customers as” and select admin agent.
- Update the account.
CSP authorization. Gets direct authorization from the customer to register devices. Gets implicit permission to register devices through the relationship their CSP Reseller partner has with the customer. Indirect CSP Providers register devices through Microsoft Partner Center.
What are roles and permissions? ›Roles are collections of permissions. Some roles allow users to simply access or read content, while other roles allow for advanced changes, such as adding participants, editing the site's content, and changing permissions for other roles.
How do I find my role in a team? ›- Sign in to the Partner Center dashboard.
- Select the Settings gear icon, then Account Settings.
- Select My profile.
- In Partner Center permissions, select Click here to view <your sign-in name> permissions to view your assigned roles.
- Choose Tools → Administration → User Maintenance → Users (transaction SU01).
- Specify the user to which you want to assign one or more roles.
- Specify any number of roles on the Roles tab page.
- To assign a role to a user for a limited time, specify a date in the Valid from or the Valid to column.
- Set up the ServiceNow integration user and the GMT time zone.
- Enable the aggregate web service.
- Setting up the ServiceNow user, group, and role. Create a ServiceNow role. Create a group. Use an existing user or create a new user.
- Set up a ServiceNow user without the ITIL role.
First, the (Database Administrator)DBA must create the role. Then the DBA can assign privileges to the role and users to the role.
What is MPN relationship? ›The Microsoft Partner Network (MPN) gives you the widest range of products in the industry and program options to differentiate your business, go to market, and sell your solutions.
How do I enable partner portal in Salesforce? ›- Create a business account.
- Click Manage External Account, and then click Enable as Partner. ...
- In the confirmation dialog, select Yes, I want to enable this account as a Partner Account.
- Click Confirm.
How do you become a global administrator in a partner center? ›
- Sign in to the Partner Center dashboard and select the Membership tile, then select Become a global admin.
- Select Become a global admin.
- On the Verify domain ownership page, copy the TXT values from the table. ...
- Sign in to your domain.
- At the Get started page, start with your work email given to you by your company, for example, you@yourcompanyname.com. a. ...
- You can sign in with your Office 365 work account, for example, you@contoso.onmicrosoft.com. Note. ...
- Provide your company's legal business details. ...
- Select Enroll now.
Delegated administration privileges (DAP) provide the capability to manage a customer's service or subscription on their behalf. The customer must grant the partner administrative permissions for that service.
What is MPN ID in Microsoft? ›A unique identifier of your business that gives you access to all the resources and benefits of your partnership with Microsoft. Your Microsoft Partner Network (MPN) ID is: Free to obtain, Ready in seconds, and. Crucial to manage your overall relationship with Microsoft.