AvePoint Online Services 2

Transcription

1 2 User Guide Service Pack 7 Issued August 2017

2 Table of Contents What s New in this Guide...6 About...7 Versions: Commercial and U.S. Government Public Sector...7 Submitting Documentation Feedback to AvePoint...8 Browser Support Information Day Free Trial Selecting Services Signing Up for Signing into Signing in with an Office 365 Account Signing in with a Salesforce Account Signing in with an Local Account Resetting Your Password Required Permissions Permissions for App Authorization Permissions for Dynamic Object Registration Getting Started Connecting to Office Connecting to Salesforce Registering Office 365 Objects via Dynamic Object Registration Starting Up Obtaining a Full License Starting the Trial on the Home Page AvePoint Cloud Backup Trial AvePoint Cloud Management Trial AvePoint Cloud Archiving Governance Automation Online Trial Compliance Guardian Online Trial File Share Navigator Online Trial

3 DocAve Backup for Salesforce Trial AvePoint Cloud Insights Trial Obtaining a License for Classic DocAve Backup User Roles Managing App Profiles Creating App Profiles Creating an App Profile for Office Creating an App Profile for Yammer Creating an App Profile for Microsoft Azure AD Creating an App Profile for Salesforce Creating an App Profile for Salesforce Sandbox Searching for Existing App Profiles Re-authorizing Administration App Re-authorizing the App for Office Re-authorizing the App for Salesforce Re-authorizing App for Salesforce Sandbox Re-authorizing the AOS Administration App Re-authorizing the Administration for Azure App Editing Admin Center URL in an App Profile for Office Deleting App Profiles Managing Users Adding Users Searching for Existing Users Editing a User s Permissions Editing Multiple Users Permissions Deactivating User Accounts Activating User Accounts Unlocking User Accounts Deleting Users Managing Office 365 Service Account Profiles Creating a Service Account Profile Searching for Existing Service Account Profiles

4 Editing a Service Account Profile Deleting Service Account Profiles Managing Account Pool Managing Encryption Profiles Preparations Creating an Encryption Profile Applying an Encryption Profile Searching for Existing Encryption Profiles Editing an Encryption Profile Deleting Encryption Profiles Managing Dynamic Object Registration Creating a Dynamic Object Registration Profile Advanced Mode Editing a Dynamic Object Registration Profile Deleting Dynamic Object Registration Profiles Viewing Scan History Viewing Dynamic Object Registration Settings Managing Rules Managing Containers Importing Objects in Batch Viewing License Information Managing Promotional Codes Applying a Promotional Code Searching for Existing Promotional Codes Viewing Transaction History Managing Subscriptions Cancelling a Subscription Viewing Invoices Viewing and Editing Credit Card Information Viewing and Editing Billing Address Enabling Report Data Collection Exporting the User Activity Report

5 Viewing Notifications Submitting Feedback Managing Your Profile Information Configuring Login IP Address Restriction for Configuring Access Rules in Azure Appendix A: Office 365 Subscriptions Charged by Appendix B: Supported Criteria in Dynamic Object Registration Rules Exchange Online Mailbox OneDrive for Business SharePoint Online Site Collection Office 365 Group Team Site Office 365 Group Mailbox Office 365 Group Appendix C: Objects Supported by Dynamic Object Registration Notices and Copyright Information

6 What s New in this Guide Updated Browser Support Information. Updated the Exchange Online Mailbox and OneDrive for Business sections in Appendix B: Supported Criteria in Dynamic Object Registration Rules to include the Office 365 Subscription Name criterion. Renamed the Legacy DocAve Backup service to Classic DocAve Backup. Removed Project Online Professional, Project Online Essentials, and Project Online Premium from Appendix A: Office 365 Subscriptions Charged by AvePoint Online Services. Added information about using an Office 365 account with MFA enabled in the Importing Objects in Batch section. The account pool can contain Office 365 accounts with multi-factor authentication enabled. Added the Required Permissions section. 6

7 About is a central hub for the following AvePoint online services: AvePoint Cloud Backup AvePoint Cloud Management AvePoint Cloud Archiving Governance Automation Online Compliance Guardian Online File Share Navigator Online DocAve Backup for Salesforce AvePoint Cloud Insights Apps: AvePoint Permissions Manager and AvePoint Perimeter Online User management for each online service and licensing for each online service (excluding apps) are accessible from the same account. supports the following languages: English, Japanese, and French. Versions: Commercial and U.S. Government Public Sector There are two versions of : a version for Commercial use, and a version available on Microsoft s Cloud Platform for U.S. Government. The U.S. Government Public Sector version of offers most of the same functionality as the Commercial version. Both versions are covered in this guide. Compared to the Commercial version, the U.S. Government Public Sector version: Sign-in page URL is: Does not support the Transaction History function. Does not support the Subscription Management function. There are feature differences between the U.S. Government Public Sector version and the Commercial version of the online services. The feature differences are covered in each online product s user guide. 7

8 Submitting Documentation Feedback to AvePoint AvePoint encourages customers to provide feedback regarding our product documentation. You can Submit Your Feedback on our website. 8

9 Browser Support Information The following table provides the required browser versions. Browser Version Internet Explorer IE 11 Google Chrome The latest version Mozilla Firefox The latest version Safari The latest version Microsoft Edge The latest version 9

10 30-Day Free Trial provides new users with a 30-day trial license for each online service. Refer to the sections below to start the trial. Selecting Services Choose one of the following methods to select services: On landing page, click Try Free for 30 Days. On the Services page, the following services are displayed under the Office 365 Services tab: o AvePoint Cloud Backup o AvePoint Cloud Management o AvePoint Cloud Archiving o Compliance Guardian Online o Governance Automation Online o File Share Navigator Online o AvePoint Cloud Insights DocAve Backup for Salesforce is displayed under the Salesforce Services tabs. Select the Add Free Trial to Cart checkboxes for your desired services. Then, click Start Trial. The Sign Up to Get Started page appears. On the landing page, you can click Learn More under each online service s introduction paragraph to view more detailed product introduction in a pop-up window. When viewing the service introduction, click Start Free Trial Now to start the trial of this service. The Sign Up to Get Started page appears. Then, refer to Signing Up for to proceed. Signing Up for On the Sign Up to Get Started page, complete the following fields in the form: First Name Last Name Corporate Address 10 Password

11 Confirm Password Organization Name Industry Title Country Code State or Province *Note: This field only appears when your country code is United States (+1). Work Phone Number Data Center *Note: Select the closest data center to your location. All of the data centers displayed are Microsoft-owned and operated Azure data centers. After the signup is finished, you cannot change the data center. Security Verification Enter the displayed verification code in the text box. Click Refresh to refresh the verification code if there is no image. Then, click Sign Up Now. Upon signing up, a confirmation is sent to your corporate address. Once you receive the , click the supplied link to activate your account. 11

12 Signing into AvePoint provides the following entries to sign into : Sign into through Visit the, DocAve Online, DocAve Governance Automation Online, Compliance Guardian Online, File Share Navigator Online, DocAve Backup for Salesforce, or AvePoint Cloud Insights page on the AvePoint website. To sign into for U.S. Government Public Sector, access the following URL: If you are on the AvePoint website, click Sign In to go to the sign-in page. On the landing page, click Sign In on the upper-right corner. Then choose one of the following sign-in methods: Signing in with an Office 365 Account Signing in with a Salesforce Account Signing in with an Local Account Signing in with an Office 365 Account To sign in with an Office 365 account, complete the following steps: 1. On the sign-in page, click Sign In with Office 365. *Note: If you are using the Office 365 account to sign into another app on the same browser, you will be automatically signed into. 2. On the Office 365 authentication page, enter an existing Office 365 account and the password. 3. Click Sign In. 4. If it is the first time that this Office 365 account is signing into, the permissions required for are displayed. Review the permissions and click Accept. The app is generated in My apps on Office 365. Click the app to access within Office 365. The app will remember your credentials when you login through it. 5. The homepage appears. *Note: If your Office 365 account does not exist but your tenant exists in, the Join page will appear. If you would like to request to join the existing tenant, you can contact Service Administrator to invite you to. 12

13 Signing in with a Salesforce Account To sign in with a Salesforce account, complete the following steps: 1. On the sign-in page, click Sign In with Salesforce. *Note: If you are using the Salesforce account to sign into another app on the same browser, you will be automatically signed into. 2. On the Salesforce login page, enter an existing Salesforce account and the password. 3. Click Sign In. 4. If it is the first time that this Salesforce account is signing into, the permissions required for are displayed. Review the permissions and click Allow. The app is generated in Connected Apps on Salesforce. The app will remember your credentials when you login through it. 5. The homepage appears. *Note: If your Salesforce account does not exist but your tenant exists in, the Join page will appear. If you would like to request to add the existing tenant, you can contact your Service Administrator to invite you to. Signing in with an Local Account To sign in with an local account, complete the following steps: 1. On the sign-in page, enter your login information: a. Login ID Enter the address used as your local account. b. Password Enter your password. *Note: If the password is entered incorrectly three consecutive times, your account will be locked. After an hour, it will automatically unlock. You can also refer to the instructions in Resetting Your Password to retrieve and reset your password. 2. Click Sign In to access homepage. Resetting Your Password You can reset your password by completing the following steps: *Note: You can only reset passwords for local users. For more information about user types, refer to Adding Users. 1. Navigate to the sign-in page. 13

14 2. Click the Forgot Password link above the Sign In button. 3. Enter the following information on the Forget Password page: a. User ID Enter the address used as your user ID. b. Verification Code Enter the verification code. Click Refresh to refresh the verification graphic if no image is displayed. 4. Click Submit to set a new password. After submitting, a verification is sent to the you specified. Retrieve the message and click the supplied link to set a new password. After clicking the link, you will be redirected to the Reset Your Password page. Enter the following information on this page: a. New Password Enter a new password that you want to use. b. Confirm Password Enter the new password again for confirmation. c. Verification Code Enter the verification code. Click Refresh to refresh the verification graphic if no image is displayed. 5. After setting up the new password, click Submit to save your new password, and then click OK in the pop-up window. You are redirected to the login page. Log into with the new password. 14

15 Required Permissions Refer to the sections below for the required permissions for using properly. Permissions for App Authorization When you create an app profile for Office 365 or Microsoft Azure AD, the Administration app or the Administration for Azure app is automatically created. Note that the Office 365 account used to consent the app must have the Global Administrator role, which is a requirement from Microsoft. For details about this role, refer to the Microsoft Article About Office 365 admin roles. The table below lists the permissions that should be accepted when you authorize the AvePoint Online Services Administration app. Permission Permission Type Why we need it? Read user profiles All Permissions Retrieve the username and tenant ID of the account that consents the app. Have full control of all site All Permissions Retrieve information of SharePoint Online collections SharePoint Online Permissions site collections that are scanned by Dynamic Object Registration. Read user profiles All Permissions Retrieve information of Office 365 user SharePoint Online Permissions profiles related to OneDrive for Business that are scanned by Dynamic Object Registration. Read directory data All Permissions Support adding Office 365 users and SharePoint Online Permissions Exchange Online Permissions groups as users. Validate whether an app profile is expired. Use Exchange Web Services with full access to all mailboxes All Permissions Exchange Online Permissions Retrieve information of Exchange Online mailboxes and Office 365 group team sites that are scanned by Dynamic Object Registration. Read activity data for your organization All Permissions Retrieve activity data in your organization to generate reports in AvePoint Cloud Insights. Sign in and read user profile All Permissions Support signing into AvePoint Online Access the directory as the signed-in user Read all groups SharePoint Online Permissions Exchange Online Permissions All Permissions All Permissions Services with Office 365 accounts. Retrieve information of a signed-in user. 15

16 Permission Permission Type Why we need it? SharePoint Online Permissions Scan Office 365 groups via Dynamic Object Registration. Exchange Online Permissions The table below lists the permissions that should be accepted when you authorize the AvePoint Online Services Administration for Azure app. Permission Sign-in and read user profile Read all users' basic profiles Read all users' full profiles Read all groups Read and write all groups Read and write directory data Access directory as the signed-in user Read directory data Read and write devices Read and write files in all site collections (preview) Why we need it? Identity Manager uses it to retrieve tenant display name, and display the name on the interface. Identity Manager uses it to search for users and display them on the interface. Identity Manager uses it to search for groups and display them on the interface. Identity Manager uses it to manage license, users, roles, groups, and applications that can be accessed by users. Governance Automation Online uses it to manage Office 365 users and groups. Identity Manager uses it to manage license, users, roles, groups, and applications that can be accessed by users. Identity Manager uses it to search for license, users, roles, groups, and applications. Identity Manager uses it to retrieve user information. Governance Automation Online uses it to retrieve the URLs of Office 365 group team sites. Permissions for Dynamic Object Registration To register objects via the Dynamic Object Registration functionality, the following permissions are required: To scan the following types of objects, the account configured in the Office 365 service account profile must have the SharePoint Administrator role. For details about this role, refer to the Microsoft article About the SharePoint Online admin role. o SharePoint Online site collections o OneDrive for Business 16

17 To scan the following types of objects, the account configured in the Office 365 app profile or Office 365 service account profile must have the Exchange Administrator role. For details about this role, refer to the Microsoft article About the Exchange Online admin role. o Exchange Online mailboxes o Office 365 groups (group mailboxes only) To scan the following type of objects, the account configured in the Office 365 service account profile must have both the Exchange Administrator role and the SharePoint Administrator role. For details about these roles, refer to the Microsoft article About Office 365 admin roles. o Office 365 groups (both group mailboxes and group team sites) 17

18 Getting Started After you sign into, the Connect to Get Started wizard appears. Refer to the instructions below to connect AvePoint online services to Office 365 or Salesforce, and then register Office 365 objects via Dynamic Object Registration. Connecting to Office 365 If you selected any services for Office 365 when using the 30-Day Free Trial, you must build the connection between and Office 365. When the connection is complete, an app profile for Office 365 is automatically created. The app profile can be used to add Office 365 groups or users as users, and can be used to register Office 365 objects in Dynamic Object Registration. 1. In the Office 365 tile, click Connect. A pop-up window appears. 2. Select the permissions for the app profile that will be automatically created when the connection is finished: All permissions SharePoint Online permissions Exchange Online permissions *Note: The permissions determine the types of objects that can be registered in Dynamic Object Registration. For more information, refer to Appendix C: Objects Supported by Dynamic Object Registration. 3. Click Connect Now. The Office 365 sign-in page appears. 4. Enter the username and password of an Office 365 Global Administrator account. Note the following: If you are using the Office 365 account to sign into another app on the same browser, your Office 365 account will be automatically used to sign in Office 365 and you can skip to step 6. The account must have the license for SharePoint Online assigned. If you are about to use AvePoint Cloud Backup to back up Exchange Online mailboxes or Office 365 groups, this account must also have the license for Exchange Online assigned AvePoint does not recommend that the Global Administrator be assigned to a personal active user account once you are using. We recommend you use a separate service account to handle all administration. 5. Click Sign in. 6. On the Administration page, review the permissions required for and click Accept. You are brought back to the wizard. 18

19 7. If the services you are using contain AvePoint Cloud Backup, AvePoint Cloud Management, AvePoint Cloud Archiving, Governance Automation Online, or Classic DocAve Backup, you must register your Office 365 objects to AvePoint Online Service first, and then you can use the service to manage these objects. Click Next in the wizard, and then configure the registration wizard. For detailed instructions, see Registering Office 365 Objects via Dynamic Object Registration. Connecting to Salesforce If you selected the DocAve Backup for Salesforce service when using the 30-Day Free Trial, you must build the connection between and Salesforce. When the connection is complete, an app profile for Salesforce is automatically created. The app profile can be used to add Salesforce users as users. 1. In the Salesforce tile, click Connect. A pop-up window appears. 2. Read the permission requirement and click Connect Now. The Salesforce sign-in page appears. 3. Enter the username and password of a Salesforce account. Note the following: 4. Click Log In. If you are using the Salesforce account to sign into another app on the same browser, your Salesforce account will be automatically used to sign in Salesforce and you can skip to step 5. The account must be associated with the System Administrator profile or another profile that has the same permissions as those of the System Administrator profile. 5. On the Allow Access page, review the permissions required for and click Allow. Registering Office 365 Objects via Dynamic Object Registration The Dynamic Object Registration feature automatically registers the following objects in your Office 365 environment: SharePoint Online site collections OneDrive for Business Exchange Online mailboxes Office 365 groups (including group team sites and group mailboxes) The detected objects will be grouped to default or custom containers, and will appear in the environment of the services you are using. will automatically monitor for object updates, creation, and deletion. 19

20 *Note: If your organization uses multi-factor authentication (MFA) in Office 365, close the registration wizard, and navigate to Dynamic Object Registration to create a registration profile. For more information about how to create a profile, refer to Creating a Dynamic Object Registration Profile. Complete the following steps to configure the registration wizard: 1. In the Register Your Office 365 Objects window, enter the username and password of an Office 365 Global Administrator account. This account will be used to manage Office 365 objects. The Default Office 365 Service Account Profile will be automatically created. 2. Click Next. 3. In the Manage Office 365 Objects window, choose to use one of the following modes: *Note: You can click Learn More to view the process of registering Office 365 objects in either mode. Express Mode For organizations with less than 300 users or for the purposes of testing, you can use this mode to register all Office 365 objects to default containers all at once. Advanced Mode For organizations with over 300 users, AvePoint recommends that you use this mode to register your Office 365 objects dynamically to custom containers according to business rules. 4. Click Start in either mode to start the registration. If you start the express mode registration, the Successfully created the profile page appears. The Default Express Profile is created for the express mode registration, and you can click Go Back to the Dynamic Object Registration Homepage to view the profile details. If you start the advanced mode registration, the Dynamic Object Registration page appears. Proceed to step Complete the following steps on the Dynamic Object Registration page: a. Define containers for each type of Office 365 objects. Click the title for an object type, click New Container, and then configure the following settings: i. Container Name Enter a name for this object container. ii. Rule Name Enter a name for the rule that will be used to filter objects. iii. Configure rule settings by selecting a criterion, selecting a condition, and selecting or entering a value. For more information about supported criteria, refer to Appendix B: Supported Criteria in Dynamic Object Registration Rules. *Note: When you select the Matches or Does Not Match condition, you can enter a value that contains regular expressions. 20

21 iv. You can click the add ( ) button to add another criterion. With multiple criteria, you must select the logic option And or Or. And The objects that meet all criteria will be filtered to be included. Or The objects that meet any one of the criteria will be filtered to be included. v. Click Save to save this container. The container settings are collapsed. You can click the blank area next to the container name to edit the container settings or click Remove to remove this container. vi. You can click New Container and repeat the steps above to create another container. vii. If you define multiple containers, set the Priority. b. If there is any object that does not meet the criteria in your rules, the object will not be registered to the containers you defined. Select a resolution for the object: o Do not add them to any containers o Add them to the system default container o Add them to a custom container If you choose this option, enter either an existing container name or a nonexisting container name. You can also click the select ( ) button to select an existing container. If you enter a non-existing container name, AvePoint Online Services will automatically create the container. c. Click Finish. The Successfully created the profile page appears. The Default Express Profile is created for the advanced mode registration, and you can click Go Back to the Dynamic Object Registration Homepage to view the profile details. *Note: The schedule of the registration is Daily; 00:00, which follows the time zone of your local computer. When the schedule reaches, will start the scan and registration process. The whole process will be divided into multiple partial scans, so that you can manage and monitor the registered objects flexibly, rather than waiting for the whole process to complete. When a partial scan is finished, the detected objects will appear in your DocAve Online and Governance Automation Online environment. You can also find them in the Scan History. *Note: After you complete the registration wizard, you can also navigate to Dynamic Object Registration to manage dynamic object registration. For example, you can modify the update schedule of the default registration profile, create a new registration profile to connect to another Office 365 tenant, manage rules and containers, etc. For more information, refer to Managing Dynamic Object Registration. 21

22 Starting Up The Home page provides the following views: My Favorite Apps This view displays the services you selected as favorites. Click a service name to access that service. You can click the heart ( ) button to remove a service from your favorites. All Apps This view displays all services that your tenant has purchased or for which it has started the trial. Click a service name to access that service. You can click the heart ( ) button to add a service to the My Favorite Apps view. Store This view displays all AvePoint online services within the AvePoint Online Service platform. You can start trial for services that were not selected when using the 30-Day Free Trial. For more information, refer to Starting the Trial on the Home Page. can be used in two ways, either by obtaining a full license or with a free trial. *Note: The license for each online service is calculated in Greenwich Mean Time (GMT 0:00). Even if the available license duration is less than 24 hours, it is calculated as one day. If your tenant s license type or license agreement of a service has changed, the new license agreement will be displayed to the Tenant Owner when the Tenant Owner is trying to access the service. The Tenant Owner must accept the new license agreement. Obtaining a Full License To obtain a full license for any of the AvePoint online services, contact AvePoint Sales. Starting the Trial on the Home Page If your tenant want to start a trial for services that were not selected when using the 30-Day Free Trial from the landing page, refer to the sections below to obtain the trial licenses of services. *Note: Only the Tenant Owner can start the trial. AvePoint Cloud Backup Trial On the Store tab, navigate to AvePoint Cloud Backup and click START TRIAL to get a 30-day trial license. A pop-up window appears with the license agreement of the trial license displayed. Read the terms in the agreement, and then you must click Accept to start the trial. 22

23 Then, you can click AvePoint Cloud Backup to access it. For detailed instructions on using AvePoint Cloud Backup, refer to the AvePoint Cloud Backup User Guide. AvePoint Cloud Management Trial On the Store tab, navigate to AvePoint Cloud Management and click START TRIAL to get a 30-day trial license. A pop-up window appears with the license agreement of the trial license displayed. Read the terms in the agreement, and then you must click Accept to start the trial. Then, you can click AvePoint Cloud Management to access it. You are brought to the DocAve Online interface. The AvePoint Cloud Management service includes the following modules in DocAve Online: Administrator Content Manager Replicator Deployment Manager Report Center Identity Manager For detailed instructions on using these modules, refer to the DocAve Online User Guide. AvePoint Cloud Archiving On the Store tab, navigate to AvePoint Cloud Archiving and click START TRIAL to get a 30-day trial license. A pop-up window appears with the license agreement of the trial license displayed. Read the terms in the agreement, and then you must click Accept to start the trial. Then, you can click AvePoint Cloud Archiving to access it. You are brought to the DocAve Online interface. The AvePoint Cloud Archiving service is the Archiver module in DocAve Online. For detailed instructions on using Archiver, refer to the DocAve Online User Guide. Governance Automation Online Trial On the Store tab, navigate to Governance Automation Online and click START TRIAL to get a 30-day trial license. A pop-up window appears with the license agreement of the trial license displayed. Read the terms in the agreement, and then you must click Accept to start the trial. Governance Automation Online integrates with AvePoint Cloud Management. To use Governance Automation Online, you must also have an available AvePoint Cloud Management license. If you click START TRIAL in Governance Automation Online when the trial license of AvePoint Cloud Management has not started yet, the AvePoint Cloud Management 30-day trial license starts immediately. 23

24 Then, you can click Governance Automation Online to access it. For detailed instructions on using Governance Automation Online, refer to the DocAve Governance Automation Online Administrator s Guide or the DocAve Governance Automation Online Business User s Guide. Compliance Guardian Online Trial On the Store tab, navigate to Compliance Guardian Online and click START TRIAL to get a 30-day trial license. A pop-up window appears with the license agreement of the trial license displayed. Read the terms in the agreement, and then you must click Accept to start the trial. Then, you can click Compliance Guardian Online to access it. For detailed instructions on using Compliance Guardian Online, refer to the Compliance Guardian Online User Guide. File Share Navigator Online Trial On the Store tab, navigate to File Share Navigator Online and click START TRIAL to get a 30-day trial license. A pop-up window appears with the license agreement of the trial license displayed. Read the terms in the agreement, and then you must click Accept to start the trial. Then, you can click File Share Navigator Online to access it. For detailed instructions on using File Share Navigator Online, refer to the File Share Navigator Online User Guide. DocAve Backup for Salesforce Trial On the Store tab, navigate to DocAve Backup for Salesforce and click START TRIAL to get a 30-day trial license. A pop-up window appears with the license agreement of the trial license displayed. Read the terms in the agreement, and then you must click Accept to start the trial. Then, you can click DocAve Backup for Salesforce to access it. For detailed instructions on using DocAve Backup for Salesforce, refer to the DocAve Backup for Salesforce User Guide that can be accessed by clicking the help ( ) button within DocAve Backup for Salesforce. AvePoint Cloud Insights Trial On the Store tab, navigate to AvePoint Cloud Insights and click START TRIAL to get a 30-day trial license. A pop-up window appears with the license agreement of the trial license displayed. Read the terms in the agreement, and then you must click Accept to start the trial. To use AvePoint Cloud Insights, you must enable the report data collection. For more information, refer to Enabling Report Data Collection. Then, you can click AvePoint Cloud Insights to access it. For detailed instructions on using AvePoint Cloud Insights, refer to the AvePoint Cloud Insights User Guide. 24

25 Obtaining a License for Classic DocAve Backup If your tenant signed up for on or after June 18 th, 2017, the Granular Backup & Restore and Exchange Online Backup & Restore modules in DocAve Online are not available to you. If you need to use these modules, contact AvePoint Sales to obtain a trial or full license. After the license is assigned to you, you can see the Classic DocAve Backup service in homepage. For detailed instructions on using these modules, refer to the DocAve Online User Guide. 25

26 User Roles In, different user roles can perform different actions. There are three main user roles: Tenant Owner This is the user whose account is used to sign up for AvePoint Online Services. There is only one Tenant Owner per tenant. A Tenant Owner can perform the following actions: o Access online products (if there are available licenses) o View license information o Apply promotional codes o View and manage users and permissions o Manage app profiles o Manage Office 365 service account profiles o Manage dynamic object registration o Manage encryption profiles o Enable report data collection o Export User Activity Report o View the notification center o Submit feedback o Edit personal profile information (as detailed in Managing Your Profile Information) Service Administrator The Tenant Owner or another Service Administrator can add Service Administrators to. Service Administrators can perform the same actions as the Tenant Owner. Tenant User The Tenant Owner and Service Administrators can add Tenant Users to. Tenant Users can be Standard Users or Application Administrators. o Standard Users can perform the following actions in : Access online products (if there are available licenses) Submit feedback Edit personal profile information (as detailed in Managing Your Profile Information) o Application Administrators can: Access online products (if there are available licenses) 26

27 Add Tenant Users and assign products to them. They can only assign the products for which they are Application Administrators. Edit Tenant Users to change available products for them. They can only select the products for which they are Application Administrators. Submit feedback Edit personal profile information (as detailed in Managing Your Profile Information) The role permissions for specific products vary by product, to learn more go to Adding Users for information that is specific to your product. 27

28 Managing App Profiles An app profile generates the app that functionalities require. AvePoint Online Services provides the following apps: Administration This app connects to Office 365 or Salesforce. AOS Administration This app connects to Yammer. Administration for Azure This app connects AvePoint Online Services to Microsoft Azure AD. An app profile is required if one of the following circumstances are met: App profile for Office 365: o You want to add Office 365 users/groups as users and want to enable single sign-on. o Your organization uses multi-factor authentication (MFA) in Office 365 and you choose Use an app profile as the authentication method when creating a dynamic object registration profile in. o You want to use the Create Container feature in DocAve Online and your organization uses multi-factor authentication in Office 365. App profile for Salesforce: o You want to add Salesforce users as users and want to enable single sign-on. o You want to use DocAve Backup for Salesforce to back up and restore Salesforce data. App profile for Yammer: o You want to enable the integration between Governance Automation Online and Yammer. o You want to use Compliance Guardian Online to scan Yammer. App profile for Microsoft Azure AD: o You want to use the Identity Manager module in DocAve Online. o You want to manage Office 365 groups and users in Governance Automation Online. For example, the Create User service. App profile for Salesforce Sandbox: You want to use DocAve Backup for Salesforce to back up and restore Salesforce Sandbox data. If your complete the Connect to Get Started window, an app profile for Office 365 or Salesforce will be automatically created. 28

29 The Tenant Owner and Service Administrators can access App Management by navigating to Management > App Management. From this menu, you can create, view, search, re-authorize, and delete app profiles. Creating App Profiles Refer to the instructions below to create app profiles for Office 365, Salesforce, Yammer, Microsoft Azure AD, and Salesforce Sandbox. Creating an App Profile for Office 365 To create an app profile for Office 365, complete the following steps: 1. Click Create on the App Management page. 2. In the pop-up window, choose Office Grant permissions to the app profile Choose one of the following options to grant permissions to the app profile you are about to create. All permissions Select this option to grant all permissions in Office 365 to the app profile. SharePoint Online permissions Select this option to grant SharePoint Online permissions to the app profile. Exchange Online permissions Select this option to grant Exchange Online permissions to the app profile. *Note: The permissions determine the types of objects that can be registered by dynamic object registration profiles. For more information, refer to Appendix C: Objects Supported by Dynamic Object Registration. 4. Creating an app profile for Office 365 requires an Office 365 Global Administrator account that has the license for SharePoint Online assigned. *Note: If your tenant is using or needs to use Exchange Online Backup and Restore in DocAve Online, or needs to use AvePoint Cloud Backup to back up Exchange Online mailboxes or Office 365 groups, this account must have the license for Exchange Online assigned. Choose one of the following options: Use the current account The currently signed in account will be used to create the app profile. i. Choose this option and click OK. ii. On the Administration page, review the permissions required for and click Accept to continue. 29

30 Sign out and use another account The currently signed in account will be signed out and you need to sign into with another account in order to create the app profile. i. Choose this option and click OK. ii. On the Office 365 Sign in page, enter the login ID and password of an Office 365 Global Administrator account. Then, click Sign in. *Note: This account will be added as a Service Administrator of AvePoint Online Services if the account does not already exist in any existing AvePoint Online Services tenant. iii. On the Administration page, review the permissions required for and click Accept to continue. The App Management page appears and the app profile is created successfully. Creating an App Profile for Yammer To create an app profile for Yammer, complete the following steps: 1. Click Create on the App Management page. 2. In the pop-up window, choose Yammer and click OK. 3. On the Yammer login page, enter the address and password of an account with the Verified Admin privileges. 4. Click Allow to proceed. The App Management page appears and the app profile is created successfully. *Note: A Yammer organization can only have one Yammer app profile. Creating an App Profile for Microsoft Azure AD To create an app profile for Microsoft Azure AD, complete the following steps: 1. Click Create on the App Management page. 2. In the pop-up window, choose Microsoft Azure AD. 3. Creating an app profile for Microsoft Azure AD requires an Office 365 Global Administrator account. *Note: There is no license requirement for this account. Choose one of the following options: Use the current account The currently signed in account will be used to create the app profile. 30

31 i. Choose this option and click OK. ii. On the Administration for Azure page, review the permissions required for and click Accept to continue. Sign out and use another account The currently signed in account will be signed out and you need to sign into with another account in order to create the app profile. i. Choose this option and click OK. ii. On the Office 365 Sign in page, enter the login ID and password of an Office 365 Global Administrator account. Then, click Sign in. iii. On the Administration for Azure page, review the permissions required for and click Accept to continue. The App Management page appears and the app profile is created successfully. Creating an App Profile for Salesforce To create an app profile for Salesforce, complete the following steps: 1. Click Create on the App Management page. 2. In the pop-up window, choose Salesforce. 3. Creating an app profile for Salesforce requires a Salesforce account with the System Administrator profile or another profile that has the same permissions as those of the System Administrator profile. Choose one of the following options: Use the current account The currently signed in account will be used to create the app profile. i. Choose this option and click OK. ii. On the Allow Access page, review the permissions required for AvePoint Online Services and click Allow to continue. Sign out and use another account The currently signed in account will be signed out and you need to sign into with another account to create the app profile. i. Choose this option and click OK. ii. On the Salesforce login page, enter the login ID and password of a Salesforce account. Then, click Log In. iii. On the Allow Access page, review the permissions required for AvePoint Online Services and click Allow to continue. The App Management page appears and the app profile is created successfully. 31

32 Creating an App Profile for Salesforce Sandbox To create an app profile for Salesforce Sandbox, complete the following steps: 1. Click Create on the App Management page. 2. In the pop-up window, choose Salesforce Sandbox and click OK. 3. Creating an app profile for Salesforce Sandbox requires a Salesforce Sandbox account with the System Administrator profile or another profile that has the same permissions as those of the System Administrator profile. a. On the Salesforce Sandbox login page, enter the login ID and password of a Salesforce Sandbox account. Then, click Log In to Sandbox. b. On the Allow Access page, review the permissions required for and click Allow to continue. The App Management page appears and the app profile is created successfully. Searching for Existing App Profiles To search for specific app profiles, enter the keyword in the text box on the upper-right corner, and click the search ( ) button or press Enter. When app profiles are displayed on multiple pages, enter an integer in the text box after Page on the lower-right corner of the page to go to your desired page. Re-authorizing Administration App The Administration app needs to be authorized by all app profiles for Office 365, Salesforce, and Salesforce Sandbox. The app profiles whose statuses are App Authorization Expired must be re-authorized. You can also re-authorize the app for an active app profile if you want to change the Office 365/Salesforce/Salesforce Sandbox account used to authorize the app. Refer to the instructions below to re-authorize the app for Office 365, Salesforce, or Salesforce Sandbox. Re-authorizing the App for Office 365 Complete the following steps to re-authorize the Administration app for an Office 365 app profile: 1. Select an app profile for Office 365 and click Re-authorize App on the ribbon. 2. The Re-authorize App action requires an Office 365 Global Administrator account that has the license for SharePoint Online assigned. *Note: If your tenant is using or needs to use Exchange Online Backup and Restore in DocAve Online, this account must have the license for Exchange Online assigned. 32

33 Choose one of the following options in the pop-up window: Use the current account The currently signed in account will be used to authorize the app. i. Choose this option and click OK. ii. On the Administration page, review the permissions required for and click Accept to continue. Sign out and use another account The currently signed in account will be signed out and you need to sign into with another account to authorize the app. i. Choose this option and click OK. ii. On the Office 365 Sign in page, enter the login ID and password of an Office 365 Global Administrator account. Then, click Sign in. iii. *Note: This account will be added as a Service Administrator of AvePoint Online Services if it does not exist in any existing tenant. On the Administration page, review the permissions required for and click Accept to continue. The App Management page appears and the Administration app is successfully authorized for the selected tenant profile. Re-authorizing the App for Salesforce Complete the following steps to re-authorize the Administration app for a Salesforce app profile: 1. Select an app profile for Salesforce and click Re-authorize App on the ribbon. 2. The Re-authorize App action requires a Salesforce account with the System Administrator profile or another profile that has the same permissions as the System Administrator profile. Choose one of the following options in the pop-up window: Use the current account The currently signed in account will be used to authorize the app. i. Choose this option and click OK. ii. On the Allow Access page, review the permissions required for AvePoint Online Services and click Allow to continue. Sign out and use another account You will be logged out of the current account and you need to sign into with another account to authorize the app. i. Choose this option and click OK. 33

34 ii. On the Salesforce login page, enter the login ID and password of a Salesforce account. Then, click Log In. iii. On the Allow Access page, review the permissions required for AvePoint Online Services and click Allow to continue. The App Management page appears and the Administration app is successfully authorized for the selected tenant profile. Re-authorizing App for Salesforce Sandbox Complete the following steps to re-authorize the Administration app for a Salesforce Sandbox app profile: 1. Select an app profile for Salesforce Sandbox and click Re-authorize App on the ribbon. 2. The Re-authorize App action requires a Salesforce Sandbox account with the System Administrator profile or another profile that has the same permissions as the System Administrator profile. a. On the Salesforce Sandbox login page, enter the login ID and password of a Salesforce Sandbox account. Then, click Log In to Sandbox. b. On the Allow Access page, review the permissions required for and click Allow to continue. The App Management page appears and the Administration app is successfully authorized for the selected tenant profile. Re-authorizing the AOS Administration App The AOS Administration app needs to be authorized by the app profile for Yammer. App profiles with the App Authorization Expired status must be re-authorized. You can also re-authorize the app for an active app profile if you want to change the Yammer account used to authorize the app. Complete the following steps to re-authorize the app: 1. Select the app profile for Yammer and click Re-authorize App on the ribbon. 2. The Re-authorize App action requires a Yammer account with the Verified Admin privileges. On the Yammer login page, enter the address and password. 3. Click Log In. The App Management page appears and the app registered for is successfully authorized for the selected tenant profile. 34

35 Re-authorizing the Administration for Azure App The Administration for Azure app needs to be authorized by the app profile for Microsoft Azure AD. The app profile whose status is App Authorization Expired must be re-authorized. You can also re-authorize the app for an active app profile if you want to change the Offi ce 365 account used to authorize the app. Complete the following steps to re-authorize the app: 1. Select an app profile for Microsoft Azure AD and click Re-authorize App on the ribbon. 2. The Re-authorize App action requires an Office 365 Global Administrator account. *Note: There is no license requirement for this account. Choose one of the following options in the pop-up window: Use the current account The currently signed in account will be used to authorize the app. i. Choose this option and click OK. ii. On the Administration for Azure page, review the permissions required for and click Accept to continue. Sign out and use another account You will be logged out of the current account and you need to sign into with another account to authorize the app. i. Choose this option and click OK. ii. On the Office 365 Sign in page, enter the login ID and password of an Office 365 Global Administrator account. Then, click Sign in. iii. On the Administration for Azure page, review the permissions required for and click Accept to continue. The App Management page appears and the Administration for Azure app is successfully authorized for the selected tenant profile. Editing Admin Center URL in an App Profile for Office 365 In an app profile for Office 365, your tenant s SharePoint Online admin center URL is retrieved and stored. If your tenant s admin center URL is changed, you can edit the admin center URL in the app profile. Complete the following steps to edit the admin center URL: 35