AvePoint Online Services 2

2 User Guide Service Pack 10 Issued Octber 2017

Table f Cntents What is New in this Release... 6 Abut... 9 Versins: Cmmercial and U.S. Gvernment Public Sectr... 9 Submitting Dcumentatin Feedback t AvePint... 10 Brwser Supprt Infrmatin... 11 30-Day Free Trial... 12 Selecting Services... 12 Signing Up fr... 12 Signing int... 14 Signing in with an Office 365 Accunt... 14 Signing in with a Salesfrce Accunt... 15 Signing in with an Lcal Accunt... 15 Resetting Yur Passwrd... 15 Required Permissins... 17 Permissins fr App Authrizatin... 17 Permissins fr Dynamic Object Registratin... 18 Getting Started... 20 Starting Up... 24 Obtaining a Full License... 24 Starting the Trial n the Hme Page... 24 AvePint Clud Backup Trial... 25 AvePint Clud Management Trial... 25 AvePint Clud Archiving Trial... 25 Gvernance Autmatin Online Trial... 25 File Share Navigatr Online Trial... 26 AvePint Clud Backup fr Salesfrce Trial... 26 AvePint Clud Insights Trial... 26 AvePint Clud Recrds Trial... 27 Obtaining a License fr Classic DcAve Backup... 27 2

User Rles... 28 Managing App Prfiles... 30 Creating App Prfiles... 31 Creating Applicatins in Azure Gvernment... 31 Creating an App Prfile fr Office 365... 34 Creating an App Prfile fr Yammer... 35 Creating an App Prfile fr Micrsft Azure AD... 35 Creating an App Prfile fr Salesfrce... 36 Creating an App Prfile fr Salesfrce Sandbx... 37 Searching fr Existing App Prfiles... 37 Re-authrizing Administratin App... 38 Re-authrizing the App fr Office 365... 38 Re-authrizing the App fr Salesfrce... 39 Re-authrizing App fr Salesfrce Sandbx... 39 Re-authrizing the AOS Administratin App... 40 Re-authrizing the Administratin fr Azure App... 40 Editing Admin Center URL in an App Prfile fr Office 365... 41 Deleting App Prfiles... 41 Managing Users... 42 Adding Users... 43 Creating the Office 365 Accunt Sign-in Authrizatin Applicatin in Azure Gvernment... 46 Searching fr Existing Users... 47 Editing a User s Permissins... 47 Editing Multiple Users Permissins... 47 Deactivating User Accunts... 48 Activating User Accunts... 48 Unlcking User Accunts... 48 Deleting Users... 49 Managing Office 365 Service Accunt Prfiles... 50 Creating a Service Accunt Prfile... 50 Searching fr Existing Service Accunt Prfiles... 51 Editing a Service Accunt Prfile... 51 3

Deleting Service Accunt Prfiles... 51 Managing Accunt Pl... 52 Managing Encryptin Prfiles... 53 Preparatins... 53 Creating an Encryptin Prfile... 54 Applying an Encryptin Prfile... 54 Searching fr Existing Encryptin Prfiles... 54 Editing an Encryptin Prfile... 54 Deleting Encryptin Prfiles... 55 Managing Dynamic Object Registratin... 56 Creating a Dynamic Object Registratin Prfile... 57 Advanced Mde... 59 Editing a Dynamic Object Registratin Prfile... 60 Deleting Dynamic Object Registratin Prfiles... 61 Viewing Scan Histry... 61 Viewing Dynamic Object Registratin Settings... 61 Managing Rules... 62 Managing Cntainers... 62 Imprting Objects in Batch... 63 Viewing License Infrmatin... 65 Managing Prmtinal Cdes... 66 Applying a Prmtinal Cde... 66 Searching fr Existing Prmtinal Cdes... 66 Viewing Transactin Histry... 67 Managing Subscriptins... 68 Cancelling a Subscriptin... 68 Viewing Invices... 69 Viewing and Editing Credit Card Infrmatin... 69 Viewing and Editing Billing Address... 69 Enabling Reprt Data Cllectin... 70 Exprting the User Activity Reprt... 72 Cnfiguring Advanced Settings... 73 4

Enabling Integratin with SCOM... 73 Enabling Trusted IP Address Settings... 73 Viewing Ntificatins... 75 Submitting Feedback... 77 Managing Yur Prfile Infrmatin... 78 Appendix A: Supprted Criteria in Dynamic Object Registratin Rules... 79 Exchange Online Mailbx... 79 OneDrive fr Business... 81 SharePint Online Site Cllectin... 83 Office 365 Grup... 84 Prject Online Site Cllectin... 86 Exchange Online Public Flder... 87 Appendix B: Objects Supprted by Dynamic Object Registratin... 88 Appendix C: Creating a Key Vault in Azure... 91 Appendix D: Passwrd Limitatins and Requirements f Office 365 Accunts... 93 Ntices and Cpyright Infrmatin... 94 5

What is New in this Release Dynamic Object Registratin nw supprts scanning Exchange Online public flders if yur tenant has a license fr AvePint Clud Backup Exchange Online Public Flder. Figure 1: Supprt fr Exchange Online public flder. Dynamic Object Registratin advanced mde nw supprts scanning all bjects f the same type and placing them in ne custm cntainer withut any dynamic rules. Figure 2: Scanning all bjects and placing them in ne cntainer. 6

Supprt fr trusted IP addresses r IP address range. Figure 3: Supprt fr trusted IP addresses r ranges Dynamic rules nw supprt the Jb Title criterin fr scanning Exchange Online mailbxes and OneDrive fr Business. Dynamic rules nw supprt the Created frm criterin fr scanning Office 365 grups that are created frm Micrsft Teams. This criterin is nly available when a service accunt prfile is selected as the authenticatin methd in the dynamic bject registratin prfile. The Manage Cntainers functinality nw supprts viewing details f each custm cntainer. Yu can add Office 365 users as users as lng as yu have an Office 365 service accunt prfile cnfigured. The app prfile is nt required fr adding Office 365 users any mre. Renamed the DcAve Backup fr Salesfrce service t AvePint Clud Backup fr Salesfrce. Fr mre infrmatin, refer t the Release Ntes. The fllwing updates have been made t this user guide fr this release: Updated the Getting Started sectin. Updated the Managing Dynamic Object Registratin sectin. Updated the Managing Cntainers sectin. Updated the Adding Users sectin. Added the Enabling Trusted IP Address Settings sectin. 7

In Appendix A: Supprted Criteria in Dynamic Object Registratin Rules: Added the Exchange Online Public Flder sectin. Updated the Exchange Online Mailbx, OneDrive fr Business, and Office 365 Grup sectins Updated Appendix B: Objects Supprted by Dynamic Object Registratin. Added Appendix D: Passwrd Limitatins and Requirements f Office 365 Accunts. 8

Abut is a central hub fr the fllwing AvePint nline services: AvePint Clud Backup AvePint Clud Management AvePint Clud Archiving Gvernance Autmatin Online File Share Navigatr Online AvePint Clud Backup fr Salesfrce AvePint Clud Insights AvePint Clud Recrds App: AvePint Permissins Manager (Preview) User management fr each nline service and licensing fr each nline service (excluding apps) are accessible frm the same accunt. supprts the fllwing languages: English, Japanese, and French. Versins: Cmmercial and U.S. Gvernment Public Sectr There are tw versins f : a versin fr Cmmercial use, and a versin available n Micrsft s Clud Platfrm fr U.S. Gvernment. The U.S. Gvernment Public Sectr versin f ffers mst f the same functinality as the Cmmercial versin. Bth versins are cvered in this guide. Cmpared t the Cmmercial versin, the U.S. Gvernment Public Sectr versin: Sign-in page URL is: https://usgv.avepintnlineservices.cm. Des nt supprt the Transactin Histry functin. Des nt supprt the Subscriptin Management functin. Requires the manual applicatin creatin fr Office 365 and Micrsft Azure AD app prfiles if yur tenant uses the Active Directry in Micrsft Azure Gvernment. Requires the manual creatin fr Office 365 accunt sign-in authrizatin applicatin if yur tenant uses the Active Directry in Micrsft Azure Gvernment. There are feature differences between the U.S. Gvernment Public Sectr versin and the Cmmercial versin f the nline services. The feature differences are cvered in each nline prduct s user guide. 9

Submitting Dcumentatin Feedback t AvePint AvePint encurages custmers t prvide feedback regarding ur prduct dcumentatin. Yu can Submit Yur Feedback n ur website. 10

Brwser Supprt Infrmatin The fllwing table prvides the required brwser versins. Brwser Versin Internet Explrer IE 11 Ggle Chrme The latest versin Mzilla Firefx The latest versin Safari The latest versin Micrsft Edge The latest versin 11

30-Day Free Trial prvides new users with a 30-day trial license fr each nline service. Refer t the sectins belw t start the trial. Selecting Services Chse ne f the fllwing methds t select services: On landing page, click Try Free fr 30 Days. On the Services page, the fllwing services are displayed under the Office 365 Services tab: AvePint Clud Backup AvePint Clud Management AvePint Clud Archiving Gvernance Autmatin Online File Share Navigatr Online AvePint Clud Insights AvePint Clud Recrds AvePint Clud Backup fr Salesfrce is displayed under the Salesfrce Services tabs. Select the Add Free Trial t Cart checkbxes fr yur desired services. Then, click Start Trial. The Sign Up t Get Started page appears. On the landing page, yu can click Learn Mre under each nline service s intrductin paragraph t view mre detailed prduct intrductin in a pp-up windw. When viewing the service intrductin, click Start Free Trial Nw t start the trial f this service. The Sign Up t Get Started page appears. Then, refer t Signing Up fr t prceed. Signing Up fr On the Sign Up t Get Started page, cmplete the fllwing fields in the frm: First Name Last Name Crprate E-mail Address 12 Passwrd

Cnfirm Passwrd Organizatin Name Industry Title Cuntry Cde State r Prvince *Nte: This field nly appears when yur cuntry cde is United States (+1). Wrk Phne Number Data Center *Nte: Select the clsest data center t yur lcatin. All f the data centers displayed are Micrsft-wned and perated Azure data centers. After the signup is finished, yu cannt change the data center. Security Verificatin Enter the displayed verificatin cde in the text bx. Click Refresh t refresh the verificatin cde if there is n image. Then, click Sign Up Nw. Upn signing up, a cnfirmatin e-mail is sent t yur crprate e-mail address. Once yu receive the e-mail, click the supplied link t activate yur accunt. 13

Signing int AvePint prvides the fllwing entries t sign int : Sign int thrugh https://www.avepintnlineservices.cm. Visit the, DcAve Online, DcAve Gvernance Autmatin Online, File Share Navigatr Online, AvePint Clud Backup fr Salesfrce, AvePint Clud Insights, r AvePint Clud Recrds page n the AvePint website. T sign int fr U.S. Gvernment Public Sectr, access the fllwing URL: https://usgv.avepintnlineservices.cm. If yu are n the AvePint website, click Sign In t g t the sign-in page. On the landing page, click Sign In n the upper-right crner. Then chse ne f the fllwing sign-in methds: Signing in with an Office 365 Accunt Signing in with a Salesfrce Accunt Signing in with an Lcal Accunt Signing in with an Office 365 Accunt T sign in with an Office 365 accunt, cmplete the fllwing steps: On the sign-in page, click Sign In with Office 365. *Nte: If yu are using the Office 365 accunt t sign int anther app n the same brwser, yu will be autmatically signed int. On the Office 365 authenticatin page, enter an existing Office 365 accunt and the passwrd. Click Sign In. If it is the first time that this Office 365 accunt is signing int, the permissins required fr are displayed. Review the permissins and click Accept. The app is generated in My apps n Office 365. Click the app t access within Office 365. The app will remember yur credentials when yu sign in thrugh it. The hmepage appears. *Nte: If yur Office 365 accunt des nt exist but yur tenant exists in, the Jin page will appear. If yu wuld like t request t jin the existing tenant, yu can cntact Service Administratr t invite yu t. 14

Signing in with a Salesfrce Accunt T sign in with a Salesfrce accunt, cmplete the fllwing steps: On the sign-in page, click Sign In with Salesfrce. *Nte: If yu are using the Salesfrce accunt t sign int anther app n the same brwser, yu will be autmatically signed int. On the Salesfrce lgin page, enter an existing Salesfrce accunt and the passwrd. Click Sign In. If it is the first time that this Salesfrce accunt is signing int, the permissins required fr are displayed. Review the permissins and click Allw. The app is generated in Cnnected Apps n Salesfrce. The app will remember yur credentials when yu lgin thrugh it. The hmepage appears. *Nte: If yur Salesfrce accunt des nt exist but yur tenant exists in, the Jin page will appear. If yu wuld like t request t add the existing tenant, yu can cntact yur Service Administratr t invite yu t. Signing in with an Lcal Accunt T sign in with an lcal accunt, cmplete the fllwing steps: On the sign-in page, enter yur lgin infrmatin: a. Lgin ID Enter the e-mail address used as yur lcal accunt. b. Passwrd Enter yur passwrd. *Nte: If the passwrd is entered incrrectly three cnsecutive times, yur accunt will be lcked. After an hur, it will autmatically unlck. Yu can als refer t the instructins in Resetting Yur Passwrd t retrieve and reset yur passwrd. Click Sign In t access hmepage. Resetting Yur Passwrd Yu can reset yur passwrd by cmpleting the fllwing steps: *Nte: Yu can nly reset passwrds fr lcal users. Fr mre infrmatin abut user types, refer t Adding Users. Navigate t the sign-in page. 15

Click the Frgt Passwrd link abve the Sign In buttn. Enter the fllwing infrmatin n the Frget Passwrd page: a. User ID Enter the e-mail address used as yur user ID. b. Verificatin Cde Enter the verificatin cde. Click Refresh t refresh the verificatin graphic if n image is displayed. Click Submit t set a new passwrd. After submitting, a verificatin e-mail is sent t the e-mail yu specified. Retrieve the e-mail message and click the supplied link t set a new passwrd. After clicking the link, yu will be redirected t the Reset Yur Passwrd page. Enter the fllwing infrmatin n this page: a. New Passwrd Enter a new passwrd that yu want t use. b. Cnfirm Passwrd Enter the new passwrd again fr cnfirmatin. c. Verificatin Cde Enter the verificatin cde. Click Refresh t refresh the verificatin graphic if n image is displayed. After setting up the new passwrd, click Submit t save yur new passwrd, and then click OK in the pp-up windw. Yu are redirected t the lgin page. Lg int with the new passwrd. 16

Required Permissins Refer t the sectins belw fr the required permissins fr using prperly. Permissins fr App Authrizatin When yu create an app prfile fr Office 365 r Micrsft Azure AD, the Administratin app r the Administratin fr Azure app is autmatically created. Nte that the Office 365 accunt used t cnsent the app must have the Glbal Administratr rle, which is a requirement frm Micrsft. Fr details abut this rle, refer t the Micrsft Article Abut Office 365 admin rles. The table belw lists the permissins that shuld be accepted when yu authrize the AvePint Online Services Administratin app. Permissin Permissin Type Why we need it? Read user prfiles All Permissins Retrieve the username and tenant ID f the accunt that cnsents the app. Have full cntrl f all site All Permissins Retrieve infrmatin f SharePint Online cllectins SharePint Online Permissins site cllectins that are scanned by Dynamic Object Registratin. Read user prfiles All Permissins Retrieve infrmatin f Office 365 user SharePint Online Permissins prfiles related t OneDrive fr Business that are scanned by Dynamic Object Registratin. Read directry data All Permissins Supprt adding Office 365 users and SharePint Online Permissins Exchange Online Permissins grups as users. Validate whether an app prfile is expired. Use Exchange Web Services with full access t all mailbxes All Permissins Exchange Online Permissins Retrieve infrmatin f Exchange Online mailbxes and Office 365 grup team sites that are scanned by Dynamic Object Registratin. Read activity data fr yur rganizatin All Permissins Retrieve activity data in yur rganizatin t generate reprts in AvePint Clud Insights. Sign in and read user prfile All Permissins Supprt signing int AvePint Online Access the directry as the signed-in user Read all grups SharePint Online Permissins Exchange Online Permissins All Permissins All Permissins Services with Office 365 accunts. Retrieve infrmatin f a signed-in user. 17

Permissin Permissin Type Why we need it? SharePint Online Permissins Scan Office 365 grups via Dynamic Object Registratin. Exchange Online Permissins The table belw lists the permissins that shuld be accepted when yu authrize the AvePint Online Services Administratin fr Azure app. Permissin Sign-in and read user prfile Read all users' basic prfiles Read all users' full prfiles Read all grups Read and write all grups Read and write directry data Access directry as the signed-in user Read directry data Read and write devices Read and write files in all site cllectins (preview) Why we need it? Identity Manager uses it t retrieve tenant display name, and display the name n the interface. Identity Manager uses it t search fr users and display them n the interface. Identity Manager uses it t search fr grups and display them n the interface. Identity Manager uses it t manage license, users, rles, grups, and applicatins that can be accessed by users. Gvernance Autmatin Online uses it t manage Office 365 users and grups. Identity Manager uses it t manage license, users, rles, grups, and applicatins that can be accessed by users. Identity Manager uses it t search fr license, users, rles, grups, and applicatins. Identity Manager uses it t retrieve user infrmatin. Gvernance Autmatin Online uses it t retrieve the URLs f Office 365 grup team sites. Permissins fr Dynamic Object Registratin T register bjects via the Dynamic Object Registratin functinality, the fllwing permissins are required: T scan the fllwing types f bjects, the accunt cnfigured in the Office 365 service accunt prfile must have the SharePint Administratr rle. Fr details abut this rle, refer t the Micrsft article Abut the SharePint Online admin rle. SharePint Online site cllectins OneDrive fr Business 18

T scan the fllwing types f bjects, the accunt cnfigured in the Office 365 app prfile r Office 365 service accunt prfile must have the Exchange Administratr rle. Fr details abut this rle, refer t the Micrsft article Abut the Exchange Online admin rle. Exchange Online mailbxes Office 365 grups (grup mailbxes nly) T scan the fllwing type f bjects, the accunt cnfigured in the Office 365 service accunt prfile must have bth the Exchange Administratr rle and the SharePint Administratr rle. Fr details abut these rles, refer t the Micrsft article Abut Office 365 admin rles. Office 365 grups (bth grup mailbxes and grup team sites) 19

Getting Started After yu sign int, the Register Yur Office 365 Objects wizard appears. *Nte: If yur rganizatin uses multi-factr authenticatin (MFA) in Office 365, clse the registratin wizard, and navigate t Dynamic Object Registratin t create a registratin prfile. Fr mre infrmatin abut hw t create a prfile, refer t Creating a Dynamic Object Registratin Prfile. With the cmpletin f this wizard, Dynamic Object Registratin can autmatically register the fllwing bjects in yur Office 365 envirnment: Nte the fllwing: SharePint Online site cllectins OneDrive fr Business Exchange Online mailbxes Office 365 grups (including grup team sites and grup mailbxes) Prject Online site cllectins Exchange Online public flders If yur tenant wants t back up Exchange Online public flders via AvePint Clud Backup, cntact AvePint Sales t purchase the license fr AvePint Clud Backup Exchange Online Public Flder. Then, Dynamic Object Registratin can scan Exchange Online public flders. If yur tenant nly purchased the enterprise licenses f several AvePint Clud Backup mdules, Dynamic Object Registratin scans bjects accrding t the licenses yu purchased. Fr example, if nly the Exchange Online mdule license is purchased, nly mailbxes will be scanned. If yur tenant purchased the enterprise licenses f several AvePint Clud Backup mdules, and als has the licenses f ne r mre ther AvePint services fr Office 365, all bject types will be available t yu. Hwever, if yu d nt have the Prject Online mdule license fr AvePint Clud Backup, d nt custmize cntainers fr Prject Online site cllectins. With the exceptin f AvePint Clud Backup, all AvePint services fr Office 365 regard Prject Online site cllectins as nrmal SharePint Online site cllectins, and Dynamic Object Registratin will scan Prject Online site cllectins as nrmal SharePint Online site cllectins. The detected bjects will be gruped t default r custm cntainers, and will appear in the envirnment f the services yu are using. will autmatically mnitr fr bject updates, creatin, and deletin. Cmplete the fllwing steps t cnfigure the registratin wizard: 20

In the Register Yur Office 365 Objects windw, enter the username and passwrd f an Office 365 Glbal Administratr accunt. The credentials f this accunt will be used t scan Office 365 bjects. AvePint des nt recmmend that the Glbal Administratr be assigned t a persnal active user accunt nce yu are using. We recmmend yu use a separate service accunt t handle all administratin. *Nte: The passwrd is validated via Office 365 API. Due t an Office 365 API limitatin, yu may encunter the fllwing issue: the passwrd is checked as invalid here, but yu can use this passwrd t lg int Office 365 successfully. T reslve the issue, yu must change yur passwrd in Office 365, and then enter the new passwrd here. Fr details abut the passwrd limitatins and requirements, refer t Appendix D: Passwrd Limitatins and Requirements f Office 365 Accunts. Click Next. In the Manage Office 365 Objects windw, chse t use ne f the fllwing mdes: *Nte: Yu can click Learn Mre t view the prcess f registering Office 365 bjects in either mde. Express Mde Fr rganizatins with less than 300 users r fr the purpses f testing, yu can use this mde t register all Office 365 bjects t default cntainers all at nce. Advanced Mde Fr rganizatins with ver 300 users, AvePint recmmends that yu use this mde t register yur Office 365 bjects dynamically t custm cntainers accrding t business rules. Click Start in either mde t start the registratin. If yu start the express mde registratin, the Successfully created the prfile page appears. The Default Express Prfile is created fr the express mde registratin, and yu can click G Back t the Dynamic Object Registratin Hmepage t view the prfile details. If yu start the advanced mde registratin, the Dynamic Object Registratin page appears. Prceed t step 5. Cmplete the fllwing steps n the Dynamic Object Registratin page. Chse ne f the fllwing methds t scan bjects: Scan all bjects and place them in ne cntainer r Scan bjects accrding t dynamic rules. If yu chse the Scan all bjects and place them in ne cntainer ptin, enter a cntainer name in the text bx. Yu can als click the select cntainer ( ) buttn and select an existing cntainer in the pp-up windw. If yu chse the Scan bjects accrding t dynamic rules ptin, define cntainers fr desired Office 365 bject types. Click the title fr an bject type, click New Cntainer, and then cnfigure the fllwing settings: Cntainer Name Enter a name fr this bject cntainer. 21

Rule Name Enter a name fr the rule that will be used t filter bjects. Cnfigure rule settings by selecting a criterin, selecting a cnditin, and selecting r entering a value. Fr mre infrmatin abut supprted criteria, refer t Appendix A: Supprted Criteria in Dynamic Object Registratin Rules. *Nte: When yu select the Matches r Des Nt Match cnditin, yu can enter a value that cntains regular expressins. Yu can click the add ( ) buttn t add anther criterin. With multiple criteria, yu must select the lgic ptin And r Or. And The bjects that meet all criteria will be filtered t be included. Or The bjects that meet any ne f the criteria will be filtered t be included. Click Save t save this cntainer. The cntainer settings are cllapsed. Yu can click the blank area next t the cntainer name t edit the cntainer settings r click Remve t remve this cntainer. Yu can click New Cntainer and repeat the steps abve t create anther cntainer. If yu define multiple cntainers, set the Pririty. If there is any bject that des nt meet the criteria in yur rules, the bject will nt be registered t the cntainers yu defined. Select a reslutin fr the bject: D nt add them t any cntainers Add them t the system default cntainer Add them t a custm cntainer If yu chse this ptin, enter either an existing cntainer name r a nnexisting cntainer name. Yu can als click the select ( ) buttn t select an existing cntainer. If yu enter a nn-existing cntainer name, AvePint Online Services will autmatically create the cntainer. d. Click Finish. The Successfully created the prfile page appears. The Default Express Prfile is created fr the advanced mde registratin, and yu can click G Back t the Dynamic Object Registratin Hmepage t view the prfile details. *Nte: The schedule f the registratin is Daily; 00:00, which fllws the time zne f yur lcal cmputer. When the schedule reaches, will start the scan and registratin prcess. The whle prcess will be divided int multiple partial scans, s that yu can manage and mnitr the registered bjects flexibly, rather than waiting fr the whle prcess t cmplete. When a partial scan is finished, the detected bjects will appear in the envirnment f the services yu are using. Yu can als find them in the Scan Histry. 22

*Nte: After yu cmplete the registratin wizard, yu can als navigate t Dynamic Object Registratin t manage dynamic bject registratin. Fr example, yu can mdify the update schedule f the default registratin prfile, create a new registratin prfile t cnnect t anther Office 365 tenant, manage rules and cntainers, etc. Fr mre infrmatin, refer t Managing Dynamic Object Registratin. 23

Starting Up The Hme page prvides the fllwing views: My Favrite Apps This view displays the services yu selected as favrites. Click a service name t access that service. Yu can click the heart ( ) buttn t remve a service frm yur favrites. All Apps This view displays all services that yur tenant has purchased r fr which it has started the trial. Click a service name t access that service. Yu can click the heart ( ) buttn t add a service t the My Favrite Apps view. Stre This view displays all AvePint nline services within the AvePint Online Service platfrm. Yu can start trial fr services that were nt selected when using the 30-Day Free Trial. Fr mre infrmatin, refer t Starting the Trial n the Hme Page. can be used in tw ways, either by btaining a full license r with a free trial. *Nte: The license fr each nline service is calculated in Greenwich Mean Time (GMT 0:00). Even if the available license duratin is less than 24 hurs, it is calculated as ne day. If yur tenant s license type r license agreement f a service has changed, the new license agreement will be displayed t the Tenant Owner when the Tenant Owner is trying t access the service. The Tenant Owner must accept the new license agreement. Obtaining a Full License T btain a full license fr any f the AvePint nline services, cntact AvePint Sales. AvePint services fr Office 365 charge licenses f several Office 365 subscriptins. Fr mre infrmatin, refer t Licensing Infrmatin. Starting the Trial n the Hme Page If yur tenant wants t start a trial fr services that were nt selected when using the 30-Day Free Trial frm the landing page, refer t the sectins belw t btain the trial licenses f services. *Nte: Only the Tenant Owner can start the trial. 24

AvePint Clud Backup Trial On the Stre tab, navigate t AvePint Clud Backup and click START TRIAL t get a 30-day trial license. A pp-up windw appears with the license agreement f the trial license displayed. Read the terms in the agreement, and then yu must click Accept t start the trial. Then, yu can click AvePint Clud Backup t access it. Fr detailed instructins n using AvePint Clud Backup, refer t the AvePint Clud Backup User Guide. AvePint Clud Management Trial On the Stre tab, navigate t AvePint Clud Management and click START TRIAL t get a 30-day trial license. A pp-up windw appears with the license agreement f the trial license displayed. Read the terms in the agreement, and then yu must click Accept t start the trial. Then, yu can click AvePint Clud Management t access it. Yu are brught t the DcAve Online interface. The AvePint Clud Management service includes the fllwing mdules in DcAve Online: Administratr Cntent Manager Replicatr Deplyment Manager Reprt Center Identity Manager Fr detailed instructins n using these mdules, refer t the DcAve Online User Guide. AvePint Clud Archiving Trial On the Stre tab, navigate t AvePint Clud Archiving and click START TRIAL t get a 30-day trial license. A pp-up windw appears with the license agreement f the trial license displayed. Read the terms in the agreement, and then yu must click Accept t start the trial. Then, yu can click AvePint Clud Archiving t access it. Yu are brught t the DcAve Online interface. The AvePint Clud Archiving service is the Archiver mdule in DcAve Online. Fr detailed instructins n using Archiver, refer t the DcAve Online User Guide. Gvernance Autmatin Online Trial On the Stre tab, navigate t Gvernance Autmatin Online and click START TRIAL t get a 30-day trial license. A pp-up windw appears with the license agreement f the trial license displayed. Read the terms in the agreement, and then yu must click Accept t start the trial. 25

Gvernance Autmatin Online integrates with AvePint Clud Management. T use Gvernance Autmatin Online, yu must als have an available AvePint Clud Management license. If yu click START TRIAL in Gvernance Autmatin Online when the trial license fr AvePint Clud Management has nt started yet, the AvePint Clud Management 30-day trial license will start immediately. Then, yu can click Gvernance Autmatin Online t access it. Fr detailed instructins n using Gvernance Autmatin Online, refer t the DcAve Gvernance Autmatin Online Administratr s Guide r the DcAve Gvernance Autmatin Online Business User s Guide. File Share Navigatr Online Trial On the Stre tab, navigate t File Share Navigatr Online and click START TRIAL t get a 30-day trial license. A pp-up windw appears with the license agreement f the trial license displayed. Read the terms in the agreement, and then yu must click Accept t start the trial. Then, yu can click File Share Navigatr Online t access it. Fr detailed instructins n using File Share Navigatr Online, refer t the File Share Navigatr Online User Guide. AvePint Clud Backup fr Salesfrce Trial On the Stre tab, navigate t AvePint Clud Backup fr Salesfrce and click START TRIAL t get a 30- day trial license. A pp-up windw appears with the license agreement f the trial license displayed. Read the terms in the agreement, and then yu must click Accept t start the trial. Then, yu can click AvePint Clud Backup fr Salesfrce t access it. Fr detailed instructins n using AvePint Clud Backup fr Salesfrce, refer t the AvePint Clud Backup fr Salesfrce User Guide that can be accessed by clicking the help ( Salesfrce. AvePint Clud Insights Trial ) buttn within AvePint Clud Backup fr On the Stre tab, navigate t AvePint Clud Insights and click START TRIAL t get a 30-day trial license. A pp-up windw appears with the license agreement f the trial license displayed. Read the terms in the agreement, and then yu must click Accept t start the trial. T use AvePint Clud Insights, yu must enable the reprt data cllectin. Fr mre infrmatin, refer t Enabling Reprt Data Cllectin. Then, yu can click AvePint Clud Insights t access it. Fr detailed instructins n using AvePint Clud Insights, refer t the AvePint Clud Insights User Guide. 26

AvePint Clud Recrds Trial On the Stre tab, navigate t AvePint Clud Recrds and click START TRIAL t get a 30-day trial license. A pp-up windw appears with the license agreement f the trial license displayed. Read the terms in the agreement, and then yu must click Accept t start the trial. AvePint Clud Recrds integrates with AvePint Clud Archiving. T use AvePint Clud Recrds, yu must als have the license fr AvePint Clud Archiving. If yu click START TRIAL in AvePint Clud Recrds when the trial license fr AvePint Clud Archiving has nt started yet, the 30-day trial license fr AvePint Clud Archiving will start immediately. Then, yu can click AvePint Clud Recrds t access it. Fr detailed instructins n using AvePint Clud Recrds, refer t the AvePint Clud Recrds User Guide. Obtaining a License fr Classic DcAve Backup If yur tenant signed up fr n r after June 18 th, 2017, the Granular Backup & Restre and Exchange Online Backup & Restre mdules in DcAve Online are nt available t yu. If yu need t use these mdules, cntact AvePint Sales t btain a trial r full license. After the license is assigned t yu, yu can see the Classic DcAve Backup service in hmepage. Fr detailed instructins n using these mdules, refer t the DcAve Online User Guide. 27

User Rles In, different user rles can perfrm different actins. There are three main user rles: Tenant Owner This is the user whse accunt is used t sign up fr AvePint Online Services. There is nly ne Tenant Owner per tenant. A Tenant Owner can perfrm the fllwing actins: 28 Access nline prducts (if there are available licenses) View license infrmatin Apply prmtinal cdes View and manage users and permissins Manage app prfiles Manage Office 365 service accunt prfiles Manage dynamic bject registratin Manage encryptin prfiles Enable reprt data cllectin Exprt User Activity Reprt Enable integratin with SCOM Enable trusted IP address settings View the ntificatin center Submit feedback Edit persnal prfile infrmatin (as detailed in Managing Yur Prfile Infrmatin) Service Administratr The Tenant Owner r anther Service Administratr can add Service Administratrs t. Service Administratrs can perfrm the same actins as the Tenant Owner. Tenant User The Tenant Owner and Service Administratrs can add Tenant Users t. Tenant Users can be Standard Users r Applicatin Administratrs. Standard Users can perfrm the fllwing actins in : Access nline prducts (if there are available licenses) Submit feedback Edit persnal prfile infrmatin (as detailed in Managing Yur Prfile Infrmatin) Applicatin Administratrs can:

Access nline prducts (if there are available licenses) Add Tenant Users and assign prducts t them. They can nly assign the prducts fr which they are Applicatin Administratrs. Edit Tenant Users t change available prducts fr them. They can nly select the prducts fr which they are Applicatin Administratrs. Submit feedback Edit persnal prfile infrmatin (as detailed in Managing Yur Prfile Infrmatin) The rle permissins fr specific prducts vary by prduct, t learn mre g t Adding Users fr infrmatin that is specific t yur prduct. 29

Managing App Prfiles An app prfile generates the app that functinalities require. AvePint Online Services prvides the fllwing apps: Administratin This app cnnects t Office 365 r Salesfrce. AOS Administratin This app cnnects t Yammer. Administratin fr Azure This app cnnects AvePint Online Services t Micrsft Azure AD. An app prfile is required if ne f the fllwing circumstances are met: App prfile fr Office 365: Yur rganizatin uses multi-factr authenticatin (MFA) in Office 365 and yu chse Use an app prfile as the authenticatin methd when creating a dynamic bject registratin prfile in. Yu want t use the Create Cntainer feature in DcAve Online and yur rganizatin uses multi-factr authenticatin in Office 365. App prfile fr Salesfrce: Yu want t add Salesfrce users as users and want t enable single sign-n. Yu want t use AvePint Clud Backup fr Salesfrce t back up and restre Salesfrce data. App prfile fr Yammer: Yu want t enable the integratin between Gvernance Autmatin Online and Yammer. App prfile fr Micrsft Azure AD: Yu want t use the Identity Manager mdule in DcAve Online. Yu want t manage Office 365 grups and users in Gvernance Autmatin Online. Fr example, the Create User service. App prfile fr Salesfrce Sandbx: Yu want t use AvePint Clud Backup fr Salesfrce t back up and restre Salesfrce Sandbx data. The Tenant Owner and Service Administratrs can access App Management by navigating t Management > App Management. Frm this menu, yu can create, view, search, re-authrize, and delete app prfiles. 30

Creating App Prfiles If yur tenant is using the cmmercial versin f, refer t the sectins belw t create app prfiles: Creating an App Prfile fr Office 365 Creating an App Prfile fr Yammer Creating an App Prfile fr Micrsft Azure AD Creating an App Prfile fr Salesfrce Creating an App Prfile fr Salesfrce Sandbx If yur tenant uses the U.S. Gvernment Public Sectr versin f and uses the Active Directry in Micrsft Azure Gvernment, yu must manually create applicatins in Azure Gvernment Active Directry first. Azure Gvernment des nt allw third-party applicatins t authenticate users in its Active Directry. Fr details, refer t the instructins in Creating Applicatins in Azure Gvernment. Then, create app prfiles in. Creating Applicatins in Azure Gvernment T create applicatins in Micrsft Azure Gvernment, cmplete the fllwing steps: Sign int Azure Gvernment Prtal. Navigate t Azure Active Directry > App registratins. Create applicatin registratin. Name Enter a name fr the applicatin. Applicatin type Select Web app / API. Sign-n URL Enter the fllwing URL: https://usgv.avepintnlineservices.cm/accunt/aadlgn Click the applicatin name and cnfigure the applicatin settings in the Settings pane. a. Click Prperties. If yur users are frm multiple tenants, click Yes in the Multi-tenanted field, and then click Save. b. Click Reply URLs. Add the fllwing URL https://usgv.avepintnlineservices.cm, and then click Save. c. Click Required permissins. Add APIs and the crrespnding permissins accrding t the infrmatin in APIs and Permissins. The applicatin uses certificate authenticatin. Cmplete the fllwing steps t get certificatin infrmatin that will be prvided t the applicatin: a. Lcate yur rganizatin s certificate and exprt the certificate as a.cer file. 31

b. Navigate t Windws PwerShell. c. Enter and execute the fllwing cmmands: $certpath = Read-Hst "[.cer File Path]" $cert = New-Object System.Security.Cryptgraphy.X509Certificates.X509Certificate2 $cert.imprt($certpath) $rawcert = $cert.getrawcertdata() $base64cert = [System.Cnvert]::TBase64String($rawCert) $rawcerthash = $cert.getcerthash() $base64certhash = [System.Cnvert]::TBase64String($rawCertHash) $KeyId = [System.Guid]::NewGuid().TString() Write-Hst $base64cert Write-Hst $base64certhash Write-Hst $KeyId *Nte: Replace [.cer File Path] with the file path f the exprted.cer file. The cmmands utput the values f $base64cert, $base64certhash, and $KeyId. The values are required in the step belw. Click Manifest next t Settings. In the Edit manifest pane, find the keycredentials nde, and enter the value in the fllwing frmat: { } "custmkeyidentifier": "[$base64certhash Value]", "keyid": "[$KeyId Value]", "type": "AsymmetricX509Cert", "usage": "Verify", "value": "[$base64cert Value]" *Nte: Replace [$base64certhash Value], [$KeyId Value], and [$base64cert Value] with the crrespnding values utput frm Windws PwerShell. Click Save t save changes t the manifest. 32

APIs and Permissins The table belw lists the APIs and permissins fr different applicatins that integrate with the U.S. Gvernment Public Sectr versin f. Applicatin API Permissin Office 365 SharePint Applicatin Online Permissin The applicatin cnnects t Office 365 (All permissins) * The applicatin cnnects t Office 365 (Exchange Online permissins) * The applicatin cnnects t Office 365 (SharePint Online permissins) * The applicatin cnnects t Azure Gvernment Active Directry. Micrsft Graph Office 365 Exchange Online Office 365 Management APIs Windws Azure Active Directry Micrsft Graph Office 365 Exchange Online Windws Azure Active Directry Office 365 SharePint Online Micrsft Graph Windws Azure Active Directry Windws Azure Active Directry Applicatin Permissin Applicatin Permissin Applicatin Permissin Applicatin Permissin Delegated Permissin Applicatin Permissin Applicatin Permissin Applicatin Permissin Delegated Permissin Applicatin Permissin Applicatin Permissin Applicatin Permissin Delegated Permissin Applicatin Permissin Delegated Permissin Have full cntrl f all site cllectins Read user prfiles Read directry data Read all grups Use Exchange Web Services with full access t all mailbxes Read activity data fr yur rganizatin Read directry data Sign in and read user prfile Read directry data Read all grups Use Exchange Web Services with full access t all mailbxes Read directry data Sign in and read user prfile Have full cntrl f all site cllectins Read user prfiles Read directry data Read all grups Read directry data Sign in and read user prfile Read and write devices Read and write dmains Sign in and read user prfile Access the directry as the signed-in user Read and write all grups Read all grups Read all users' full prfiles Read all users' basic prfiles 33

Applicatin API Permissin Micrsft Graph Applicatin Permissin Read directry data Read and write files in all site cllectins (preview) *Nte: Fr the applicatin cnnects t Office 365, the permissin types All permissins, SharePint Online permissins, and Exchange Online permissins are the ptins in the app prfile fr Office 365. The permissins determine the types f bjects that can be registered by dynamic bject registratin prfiles. Fr mre infrmatin, refer t Appendix B: Objects Supprted by Dynamic Object Registratin. Creating an App Prfile fr Office 365 T create an app prfile fr Office 365, cmplete the fllwing steps: Click Create n the App Management page. In the pp-up windw, chse Office 365. Grant permissins t the app prfile Chse ne f the fllwing ptins t grant permissins t the app prfile yu are abut t create. All permissins Select this ptin t grant all permissins in Office 365 t the app prfile. SharePint Online permissins Select this ptin t grant SharePint Online permissins t the app prfile. Exchange Online permissins Select this ptin t grant Exchange Online permissins t the app prfile. *Nte: The permissins determine the types f bjects that can be registered by dynamic bject registratin prfiles. Fr mre infrmatin, refer t Appendix B: Objects Supprted by Dynamic Object Registratin. Advanced (fr the U.S. Gvernment Public Sectr versin f nly) If yur tenant uses the Active Directry in Azure Gvernment, make sure yu have created applicatins in Azure Gvernment, and then cnfigure the fllwing advanced settings: Applicatin ID Enter the applicatin ID f the applicatin that has been created in Azure Gvernment Active Directry. Certificate File (.pfx) Click Brwse and select the exprted.pfx file f yur rganizatin s certificate. Certificate Passwrd Enter the passwrd f the certificate. Creating an app prfile fr Office 365 requires an Office 365 Glbal Administratr accunt that has the license fr SharePint Online assigned. 34 *Nte: If yur tenant is using r needs t use Exchange Online Backup and Restre in DcAve Online, r needs t use AvePint Clud Backup t back up Exchange Online mailbxes r Office 365 grups, this accunt must have the license fr Exchange Online assigned.

Chse ne f the fllwing ptins: Use the current accunt The currently signed in accunt will be used t create the app prfile. Chse this ptin and click OK. On the Administratin page, review the permissins required fr and click Accept t cntinue. Sign ut and use anther accunt The currently signed in accunt will be signed ut and yu need t sign int with anther accunt in rder t create the app prfile. Chse this ptin and click OK. On the Office 365 Sign in page, enter the lgin ID and passwrd f an Office 365 Glbal Administratr accunt. Then, click Sign in. *Nte: This accunt will be added as a Service Administratr f AvePint Online Services if the accunt des nt already exist in any existing AvePint Online Services tenant. On the Administratin page, review the permissins required fr and click Accept t cntinue. The App Management page appears and the app prfile is created successfully. Creating an App Prfile fr Yammer T create an app prfile fr Yammer, cmplete the fllwing steps: Click Create n the App Management page. In the pp-up windw, chse Yammer and click OK. On the Yammer lgin page, enter the e-mail address and passwrd f an accunt with the Verified Admin privileges. Click Allw t prceed. The App Management page appears and the app prfile is created successfully. *Nte: A Yammer rganizatin can nly have ne Yammer app prfile. Creating an App Prfile fr Micrsft Azure AD T create an app prfile fr Micrsft Azure AD, cmplete the fllwing steps: Click Create n the App Management page. In the pp-up windw, chse Micrsft Azure AD. 35

Advanced (fr the U.S. Gvernment Public Sectr versin f nly) If yur tenant uses the Active Directry in Azure Gvernment, make sure yu have created applicatins in Azure Gvernment, and then cnfigure the fllwing advanced settings: Applicatin ID Enter the applicatin ID f the applicatin that has been created in Azure Gvernment Active Directry. Certificate File (.pfx) Click Brwse and select the exprted.pfx file f yur rganizatin s certificate. Certificate Passwrd Enter the passwrd f the certificate. Creating an app prfile fr Micrsft Azure AD requires an Office 365 Glbal Administratr accunt. *Nte: There is n license requirement fr this accunt. Chse ne f the fllwing ptins: Use the current accunt The currently signed in accunt will be used t create the app prfile. Chse this ptin and click OK. On the Administratin fr Azure page, review the permissins required fr and click Accept t cntinue. Sign ut and use anther accunt The currently signed in accunt will be signed ut and yu need t sign int with anther accunt in rder t create the app prfile. Chse this ptin and click OK. On the Office 365 Sign in page, enter the lgin ID and passwrd f an Office 365 Glbal Administratr accunt. Then, click Sign in. On the Administratin fr Azure page, review the permissins required fr and click Accept t cntinue. The App Management page appears and the app prfile is created successfully. Creating an App Prfile fr Salesfrce T create an app prfile fr Salesfrce, cmplete the fllwing steps: Click Create n the App Management page. In the pp-up windw, chse Salesfrce. Creating an app prfile fr Salesfrce requires a Salesfrce accunt with the System Administratr prfile r anther prfile that has the same permissins as thse f the System Administratr prfile. Chse ne f the fllwing ptins: 36

Use the current accunt The currently signed in accunt will be used t create the app prfile. Chse this ptin and click OK. On the Allw Access page, review the permissins required fr AvePint Online Services and click Allw t cntinue. Sign ut and use anther accunt The currently signed in accunt will be signed ut and yu need t sign int with anther accunt t create the app prfile. Chse this ptin and click OK. On the Salesfrce lgin page, enter the lgin ID and passwrd f a Salesfrce accunt. Then, click Lg In. On the Allw Access page, review the permissins required fr AvePint Online Services and click Allw t cntinue. The App Management page appears and the app prfile is created successfully. Creating an App Prfile fr Salesfrce Sandbx T create an app prfile fr Salesfrce Sandbx, cmplete the fllwing steps: Click Create n the App Management page. In the pp-up windw, chse Salesfrce Sandbx and click OK. Creating an app prfile fr Salesfrce Sandbx requires a Salesfrce Sandbx accunt with the System Administratr prfile r anther prfile that has the same permissins as thse f the System Administratr prfile. a. On the Salesfrce Sandbx lgin page, enter the lgin ID and passwrd f a Salesfrce Sandbx accunt. Then, click Lg In t Sandbx. b. On the Allw Access page, review the permissins required fr and click Allw t cntinue. The App Management page appears and the app prfile is created successfully. Searching fr Existing App Prfiles T search fr specific app prfiles, enter the keywrd in the text bx n the upper-right crner, and click the search ( ) buttn r press Enter. When app prfiles are displayed n multiple pages, enter an integer in the text bx after Page n the lwer-right crner f the page t g t yur desired page. 37

Re-authrizing Administratin App The Administratin app needs t be authrized by all app prfiles fr Office 365, Salesfrce, and Salesfrce Sandbx. The app prfiles whse statuses are App Authrizatin Expired must be re-authrized. Yu can als re-authrize the app fr an active app prfile if yu want t change the Office 365/Salesfrce/Salesfrce Sandbx accunt used t authrize the app. Refer t the instructins belw t re-authrize the app fr Office 365, Salesfrce, r Salesfrce Sandbx. Re-authrizing the App fr Office 365 Cmplete the fllwing steps t re-authrize the Administratin app fr an Office 365 app prfile: Select an app prfile fr Office 365 and click Re-authrize App n the ribbn. The Re-authrize App actin requires an Office 365 Glbal Administratr accunt that has the license fr SharePint Online assigned. *Nte: If yur tenant is using r needs t use Exchange Online Backup and Restre in DcAve Online, this accunt must have the license fr Exchange Online assigned. Chse ne f the fllwing ptins in the pp-up windw: Use the current accunt The currently signed in accunt will be used t authrize the app. i. Chse this ptin and click OK. ii. On the Administratin page, review the permissins required fr and click Accept t cntinue. Sign ut and use anther accunt The currently signed in accunt will be signed ut and yu need t sign int with anther accunt t authrize the app. i. Chse this ptin and click OK. ii. On the Office 365 Sign in page, enter the lgin ID and passwrd f an Office 365 Glbal Administratr accunt. Then, click Sign in. iii. *Nte: This accunt will be added as a Service Administratr f AvePint Online Services if it des nt exist in any existing tenant. On the Administratin page, review the permissins required fr and click Accept t cntinue. The App Management page appears and the Administratin app is successfully authrized fr the selected tenant prfile. 38

Re-authrizing the App fr Salesfrce Cmplete the fllwing steps t re-authrize the Administratin app fr a Salesfrce app prfile: Select an app prfile fr Salesfrce and click Re-authrize App n the ribbn. The Re-authrize App actin requires a Salesfrce accunt with the System Administratr prfile r anther prfile that has the same permissins as the System Administratr prfile. Chse ne f the fllwing ptins in the pp-up windw: Use the current accunt The currently signed in accunt will be used t authrize the app. Chse this ptin and click OK. On the Allw Access page, review the permissins required fr AvePint Online Services and click Allw t cntinue. Sign ut and use anther accunt Yu will be lgged ut f the current accunt and yu need t sign int with anther accunt t authrize the app. Chse this ptin and click OK. On the Salesfrce lgin page, enter the lgin ID and passwrd f a Salesfrce accunt. Then, click Lg In. On the Allw Access page, review the permissins required fr AvePint Online Services and click Allw t cntinue. The App Management page appears and the Administratin app is successfully authrized fr the selected tenant prfile. Re-authrizing App fr Salesfrce Sandbx Cmplete the fllwing steps t re-authrize the Administratin app fr a Salesfrce Sandbx app prfile: Select an app prfile fr Salesfrce Sandbx and click Re-authrize App n the ribbn. The Re-authrize App actin requires a Salesfrce Sandbx accunt with the System Administratr prfile r anther prfile that has the same permissins as the System Administratr prfile. a. On the Salesfrce Sandbx lgin page, enter the lgin ID and passwrd f a Salesfrce Sandbx accunt. Then, click Lg In t Sandbx. b. On the Allw Access page, review the permissins required fr and click Allw t cntinue. 39