AvePoint Online Services 2 Data Management Platform User Guide

AvePoint Online Services 2
User Guide
Service Pack 7
Issued July 2017
Table of Contents
What’s New in this Guide ....................................................................................................................6
About AvePoint Online Services...........................................................................................................7
AvePoint Online Services Versions: Commercial and U.S. Government Public Sector...........................7
Submitting Documentation Feedback to AvePoint ................................................................................8
Browser Support Information ..............................................................................................................9
30-Day Free Trial .............................................................................................................................. 10
Selecting Services ......................................................................................................................... 10
Signing Up for AvePoint Online Services ......................................................................................... 10
Signing into AvePoint Online Services ................................................................................................ 12
Signing in with an Office 365 Account ............................................................................................ 12
Signing in with a Salesforce Account .............................................................................................. 13
Signing in with an AvePoint Online Services Local Account .............................................................. 13
Resetting Your AvePoint Online Services Password ......................................................................... 13
Getting Started................................................................................................................................. 15
Connecting to Office 365 ............................................................................................................... 15
Connecting to Salesforce ............................................................................................................... 16
Registering Office 365 Objects via Dynamic Object Registration....................................................... 16
Starting Up AvePoint Online Services ................................................................................................. 19
Obtaining a Full License ................................................................................................................. 19
Starting the Trial on the Home Page............................................................................................... 19
AvePoint Cloud Backup Trial....................................................................................................... 19
AvePoint Cloud Management Trial ............................................................................................. 20
AvePoint Cloud Archiving........................................................................................................... 20
Governance Automation Online Trial .......................................................................................... 20
Compliance Guardian Online Trial .............................................................................................. 21
File Share Navigator Online Trial................................................................................................. 21
DocAve Backup for Salesforce Trial ............................................................................................. 21
AvePoint Cloud Insights Trial ...................................................................................................... 21
Obtaining a License for Classic DocAve Backup ............................................................................... 22
2
AvePoint Online Services
AvePoint Online Services User Roles .................................................................................................. 23
Managing App Profiles ...................................................................................................................... 25
Creating App Profiles..................................................................................................................... 26
Creating an App Profile for Office 365......................................................................................... 26
Creating an App Profile for Yammer ........................................................................................... 27
Creating an App Profile for Microsoft Azure AD........................................................................... 27
Creating an App Profile for Salesforce......................................................................................... 28
Creating an App Profile for Salesforce Sandbox ........................................................................... 29
Searching for Existing App Profiles ................................................................................................. 29
Re-authorizing AvePoint Online Services Administration App .......................................................... 29
Re-authorizing the App for Office 365......................................................................................... 29
Re-authorizing the App for Salesforce......................................................................................... 30
Re-authorizing App for Salesforce Sandbox ................................................................................. 31
Re-authorizing the AOS Administration App ................................................................................... 31
Re-authorizing the AvePoint Online Services Administration for Azure App ...................................... 32
Editing Admin Center URL in an App Profile for Office 365............................................................... 32
Deleting App Profiles..................................................................................................................... 33
Managing AvePoint Online Services Users .......................................................................................... 34
Adding Users ................................................................................................................................ 35
Searching for Existing Users........................................................................................................... 39
Editing a User’s Permissions .......................................................................................................... 39
Editing Multiple Users’ Permissions................................................................................................ 39
Deactivating User Accounts ........................................................................................................... 40
Activating User Accounts ............................................................................................................... 40
Unlocking User Accounts ............................................................................................................... 40
Deleting Users .............................................................................................................................. 40
Managing Office 365 Service Account Profiles .................................................................................... 41
Creating a Service Account Profile.................................................................................................. 41
Searching for Existing Service Account Profiles ............................................................................... 42
Editing a Service Account Profile .................................................................................................... 42
Deleting Service Account Profiles ................................................................................................... 42
Managing Account Pool .................................................................................................................... 43
AvePoint Online Services
3
Managing Encryption Profiles ............................................................................................................ 44
Preparations................................................................................................................................. 44
Creating an Encryption Profile ....................................................................................................... 45
Applying an Encryption Profile ....................................................................................................... 45
Searching for Existing Encryption Profiles ....................................................................................... 45
Editing an Encryption Profile.......................................................................................................... 45
Deleting Encryption Profiles........................................................................................................... 45
Managing Dynamic Object Registration.............................................................................................. 46
Creating a Dynamic Object Registration Profile ............................................................................... 46
Advanced Mode ........................................................................................................................ 48
Editing a Dynamic Object Registration Profile ................................................................................. 50
Deleting Dynamic Object Registration Profiles ................................................................................ 50
Viewing Scan History ..................................................................................................................... 51
Viewing Dynamic Object Registration Settings ................................................................................ 51
Managing Rules ............................................................................................................................ 51
Managing Containers .................................................................................................................... 52
Importing Objects in Batch......................................................................................................... 53
Viewing License Information ............................................................................................................. 55
Managing Promotional Codes............................................................................................................ 56
Applying a Promotional Code......................................................................................................... 56
Searching for Existing Promotional Codes....................................................................................... 56
Viewing Transaction History .............................................................................................................. 57
Managing Subscriptions .................................................................................................................... 58
Cancelling a Subscription............................................................................................................... 58
Viewing Invoices ........................................................................................................................... 59
Viewing and Editing Credit Card Information .................................................................................. 59
Viewing and Editing Billing Address ................................................................................................ 59
Enabling Report Data Collection ........................................................................................................ 60
Exporting the User Activity Report..................................................................................................... 62
Viewing Notifications........................................................................................................................ 63
Submitting Feedback ........................................................................................................................ 65
Managing Your Profile Information .................................................................................................... 66
4
AvePoint Online Services
Configuring Login IP Address Restriction for AvePoint Online Services ................................................. 67
Configuring Access Rules in Azure .................................................................................................. 67
Appendix A: Office 365 Subscriptions Charged by AvePoint Online Services ......................................... 69
Appendix B: Supported Criteria in Dynamic Object Registration Rules.................................................. 71
Exchange Online Mailbox .............................................................................................................. 71
OneDrive for Business ................................................................................................................... 72
SharePoint Online Site Collection ................................................................................................... 74
Office 365 Group Team Site ........................................................................................................... 76
Office 365 Group Mailbox.............................................................................................................. 77
Office 365 Group .......................................................................................................................... 77
Appendix C: Objects Supported by Dynamic Object Registration ......................................................... 80
Notices and Copyright Information .................................................................................................... 82
AvePoint Online Services
5
What’s New in this Guide
6
•
Updated Browser Support Information.
•
Updated the Exchange Online Mailbox and OneDrive for Business sections in Appendix
B: Supported Criteria in Dynamic Object Registration Rules to include the Office 365
Subscription Name criterion.
•
Renamed the Legacy DocAve Backup service to Classic DocAve Backup.
•
Removed Project Online Professional, Project Online Essentials, and Project Online
Premium from Appendix A: Office 365 Subscriptions Charged by AvePoint Online
Services.
•
Added information about using an Office 365 account with MFA enabled in the
Importing Objects in Batch section.
•
The account pool can contain Office 365 accounts with multi-factor authentication
enabled.
AvePoint Online Services
About AvePoint Online Services
AvePoint Online Services is a central hub for the following AvePoint online services:
•
AvePoint Cloud Backup
•
AvePoint Cloud Management
•
AvePoint Cloud Archiving
•
Governance Automation Online
•
Compliance Guardian Online
•
File Share Navigator Online
•
DocAve Backup for Salesforce ®
•
AvePoint Cloud Insights
•
Apps: AvePoint Permissions Manager and AvePoint Perimeter Online
User management for each online service and licensing for each online service (excluding apps) are
accessible from the same AvePoint Online Services account.
AvePoint Online Services supports the following languages: English, Japanese, and French.
AvePoint Online Services Versions: Commercial and U.S.
Government Public Sector
There are two versions of AvePoint Online Services: a version for Commercial use, and a version
available on Microsoft’s Cloud Platform for U.S. Government. The U.S. Government Public Sector version
of AvePoint Online Services offers most of the same functionality as the Commercial version. Both
versions are covered in this guide. Compared to the Commercial version, the U.S. Government Public
Sector version:
•
Sign-in page URL is: https://usgov.avepointonlineservices.com.
•
Does not support the Transaction History function.
•
Does not support the Subscription Management function.
There are feature differences between the U.S. Government Public Sector version and the Commercial
version of the online services. The feature differences are covered in each online product’s user guide.
AvePoint Online Services
7
Submitting Documentation Feedback to AvePoint
AvePoint encourages customers to provide feedback regarding our product documentation. You can
Submit Your Feedback on our website.
8
AvePoint Online Services
Browser Support Information
The following table provides the required browser versions.
Browser
Internet Explorer
Google Chrome
Mozilla Firefox
Safari
Microsoft Edge
AvePoint Online Services
Version
IE 11
The latest version
The latest version
The latest version
The latest version
9
30-Day Free Trial
AvePoint Online Services provides new users with a 30-day trial license for each online service.
Refer to the sections below to start the trial.
Selecting Services
Choose one of the following methods to select services:
•
On AvePoint Online Services landing page, click Try Free for 30 Days.
On the Services page, the following services are displayed under the Office 365 Services
tab:
o
AvePoint Cloud Backup
o
AvePoint Cloud Management
o
AvePoint Cloud Archiving
o
Compliance Guardian Online
o
Governance Automation Online
o
File Share Navigator Online
o
AvePoint Cloud Insights
DocAve Backup for Salesforce is displayed under the Salesforce Services tabs.
Select the Add Free Trial to Cart checkboxes for your desired services. Then, click Start
Trial. The Sign Up to Get Started page appears.
•
On the AvePoint Online Services landing page, you can click Learn More under each
online service’s introduction paragraph to view more detailed product introduction in a
pop-up window. When viewing the service introduction, click Start Free Trial Now to
start the trial of this service. The Sign Up to Get Started page appears.
Then, refer to Signing Up for AvePoint Online Services to proceed.
Signing Up for AvePoint Online Services
On the Sign Up to Get Started page, complete the following fields in the form:
10
•
First Name
•
Last Name
•
Corporate E-mail Address
•
Password
AvePoint Online Services
•
Confirm Password
•
Organization Name
•
Industry
•
Title
•
Country Code
•
State or Province
*Note: This field only appears when your country code is United States (+1).
•
Work Phone Number
•
Data Center
*Note: Select the closest data center to your location. All of the data centers displayed
are Microsoft-owned and operated Azure data centers. After the signup is finished, you
cannot change the data center.
•
Security Verification – Enter the displayed verification code in the text box. Click
Refresh to refresh the verification code if there is no image.
Then, click Sign Up Now. Upon signing up, a confirmation e-mail is sent to your corporate e-mail
address. Once you receive the e-mail, click the supplied link to activate your account.
AvePoint Online Services
11
Signing into AvePoint Online Services
AvePoint provides the following entries to sign into AvePoint Online Services:
•
Sign into AvePoint Online Services through https://www.avepointonlineservices.com.
•
Visit the AvePoint Online Services, DocAve Online, DocAve Governance Automation
Online, Compliance Guardian Online, File Share Navigator Online, DocAve Backup for
Salesforce ®, or AvePoint Cloud Insights page on the AvePoint website.
•
To sign into AvePoint Online Services for U.S. Government Public Sector, access the
following URL: https://usgov.avepointonlineservices.com.
If you are on the AvePoint website, click Sign In to go to the AvePoint Online Services sign-in page.
On the AvePoint Online Services landing page, click Sign In on the upper-right corner. Then choose one
of the following sign-in methods:
•
Signing in with an Office 365 Account
•
Signing in with a Salesforce Account
•
Signing in with an AvePoint Online Services Local Account
Signing in with an Office 365 Account
To sign in with an Office 365 account, complete the following steps:
1. On the sign-in page, click Sign In with Office 365.
*Note: If you are using the Office 365 account to sign into another app on the same browser,
you will be automatically signed into AvePoint Online Services.
2. On the Office 365 authentication page, enter an existing Office 365 account and the password.
3. Click Sign In.
4. If it is the first time that this Office 365 account is signing into AvePoint Online Services, the
permissions required for AvePoint Online Services are displayed. Review the permissions and
click Accept. The AvePoint Online Services app is generated in My apps on Office 365. Click the
app to access AvePoint Online Services within Office 365. The app will remember your
credentials when you login through it.
5. The AvePoint Online Services homepage appears.
*Note: If your Office 365 account does not exist but your tenant exists in AvePoint Online Services, the
Join AvePoint Online Services page will appear. If you would like to request to join the existing tenant,
you can contact Service Administrator to invite you to AvePoint Online Services.
12
AvePoint Online Services
Signing in with a Salesforce Account
To sign in with a Salesforce account, complete the following steps:
1. On the sign-in page, click Sign In with Salesforce.
*Note: If you are using the Salesforce account to sign into another app on the same browser,
you will be automatically signed into AvePoint Online Services.
2. On the Salesforce login page, enter an existing Salesforce account and the password.
3. Click Sign In.
4. If it is the first time that this Salesforce account is signing into AvePoint Online Services, the
permissions required for AvePoint Online Services are displayed. Review the permissions and
click Allow. The AvePoint Online Services app is generated in Connected Apps on Salesforce.
The app will remember your credentials when you login through it.
5. The AvePoint Online Services homepage appears.
*Note: If your Salesforce account does not exist but your tenant exists in AvePoint Online Services, the
Join AvePoint Online Services page will appear. If you would like to request to add the existing tenant,
you can contact your Service Administrator to invite you to AvePoint Online Services.
Signing in with an AvePoint Online Services Local Account
To sign in with an AvePoint Online Services local account, complete the following steps:
1. On the sign-in page, enter your login information:
a. Login ID – Enter the e-mail address used as your AvePoint Online Services local account.
b. Password – Enter your password.
*Note: If the password is entered incorrectly three consecutive times, your account will
be locked. After an hour, it will automatically unlock. You can also refer to the
instructions in Resetting Your AvePoint Online Services Password to retrieve and reset
your password.
2. Click Sign In to access AvePoint Online Services homepage.
Resetting Your AvePoint Online Services Password
You can reset your AvePoint Online Services password by completing the following steps:
*Note: You can only reset passwords for local users. For more information about user types, refer to
Adding Users.
1. Navigate to the AvePoint Online Services sign-in page.
AvePoint Online Services
13
2. Click the Forgot Password link above the Sign In button.
3. Enter the following information on the Forget Password page:
a. User ID – Enter the e-mail address used as your AvePoint Online Services user ID.
b. Verification Code – Enter the verification code. Click Refresh to refresh the verification
graphic if no image is displayed.
4. Click Submit to set a new password. After submitting, a verification e-mail is sent to the e-mail
you specified. Retrieve the e-mail message and click the supplied link to set a new password.
After clicking the link, you will be redirected to the Reset Your Password page. Enter the
following information on this page:
a. New Password – Enter a new password that you want to use.
b. Confirm Password – Enter the new password again for confirmation.
c. Verification Code – Enter the verification code. Click Refresh to refresh the verification
graphic if no image is displayed.
5. After setting up the new password, click Submit to save your new password, and then click OK
in the pop-up window. You are redirected to the login page. Log into AvePoint Online Services
with the new password.
14
AvePoint Online Services
Getting Started
After you sign into AvePoint Online Services, the Connect to Get Started wizard appears. Refer to the
instructions below to connect AvePoint online services to Office 365 or Salesforce, and then register
Office 365 objects via Dynamic Object Registration.
Connecting to Office 365
If you selected any services for Office 365 when using the 30-Day Free Trial, you must build the
connection between AvePoint Online Services and Office 365. When the connection is complete, an app
profile for Office 365 is automatically created. The app profile can be used to add Office 365 groups or
users as AvePoint Online Services users, and can be used to register Office 365 objects in Dynamic
Object Registration.
1. In the Office 365 tile, click Connect. A pop-up window appears.
2. Select the permissions for the app profile that will be automatically created when the
connection is finished:
•
All permissions
•
SharePoint Online permissions
•
Exchange Online permissions
*Note: The permissions determine the types of objects that can be registered in Dynamic Object
Registration. For more information, refer to Appendix C: Objects Supported by Dynamic Object
Registration.
3. Click Connect Now. The Office 365 sign-in page appears.
4. Enter the username and password of an Office 365 Global Administrator account. Note the
following:
•
If you are using the Office 365 account to sign into another app on the same browser,
your Office 365 account will be automatically used to sign in Office 365 and you can skip
to step 6.
•
The account must have the license for SharePoint Online assigned. If you are about to
use AvePoint Cloud Backup to back up Exchange Online mailboxes or Office 365 groups,
this account must also have the license for Exchange Online assigned
•
AvePoint does not recommend that the Global Administrator be assigned to a personal
active user account once you are using AvePoint Online Services. We recommend you
use a separate service account to handle all administration.
5. Click Sign in.
6. On the AvePoint Online Services Administration page, review the permissions required for
AvePoint Online Services and click Accept. You are brought back to the wizard.
AvePoint Online Services
15
7. If the services you are using contain AvePoint Cloud Backup, AvePoint Cloud Management,
AvePoint Cloud Archiving, Governance Automation Online, or Classic DocAve Backup, you must
register your Office 365 objects to AvePoint Online Service first, and then you can use the
service to manage these objects. Click Next in the wizard, and then configure the registration
wizard. For detailed instructions, see Registering Office 365 Objects via Dynamic Object
Registration.
Connecting to Salesforce
If you selected the DocAve Backup for Salesforce ® service when using the 30-Day Free Trial, you must
build the connection between AvePoint Online Services and Salesforce. When the connection is
complete, an app profile for Salesforce is automatically created. The app profile can be used to add
Salesforce users as AvePoint Online Services users.
1. In the Salesforce tile, click Connect. A pop-up window appears.
2. Read the permission requirement and click Connect Now. The Salesforce sign-in page appears.
3. Enter the username and password of a Salesforce account. Note the following:
•
If you are using the Salesforce account to sign into another app on the same browser,
your Salesforce account will be automatically used to sign in Salesforce and you can skip
to step 5.
•
The account must be associated with the System Administrator profile or another
profile that has the same permissions as those of the System Administrator profile.
4. Click Log In.
5. On the Allow Access page, review the permissions required for AvePoint Online Services and
click Allow.
Registering Office 365 Objects via Dynamic Object Registration
The Dynamic Object Registration feature automatically registers the following objects in your Office 365
environment:
•
SharePoint Online site collections
•
OneDrive for Business
•
Exchange Online mailboxes
•
Office 365 groups (including group team sites and group mailboxes)
The detected objects will be grouped to default or custom containers, and will appear in the
environment of the services you are using. AvePoint Online Services will automatically monitor for
object updates, creation, and deletion.
16
AvePoint Online Services
*Note: If your organization uses multi-factor authentication (MFA) in Office 365, close the registration
wizard, and navigate to Dynamic Object Registration to create a registration profile. For more
information about how to create a profile, refer to Creating a Dynamic Object Registration Profile.
Complete the following steps to configure the registration wizard:
1. In the Register Your Office 365 Objects window, enter the username and password of an Office
365 Global Administrator account. This account will be used to manage Office 365 objects. The
Default Office 365 Service Account Profile will be automatically created.
2. Click Next.
3. In the Manage Office 365 Objects window, choose to use one of the following modes:
*Note: You can click Learn More to view the process of registering Office 365 objects in either
mode.
•
Express Mode – For organizations with less than 300 users or for the purposes of
testing, you can use this mode to register all Office 365 objects to default containers all
at once.
•
Advanced Mode – For organizations with over 300 users, AvePoint recommends that
you use this mode to register your Office 365 objects dynamically to custom containers
according to business rules.
4. Click Start in either mode to start the registration.
•
If you start the express mode registration, the Successfully created the profile page
appears. The Default Express Profile is created for the express mode registration, and
you can click Go Back to the Dynamic Object Registration Homepage to view the profile
details.
•
If you start the advanced mode registration, the Dynamic Object Registration page
appears. Proceed to step 5.
5. Complete the following steps on the Dynamic Object Registration page:
a. Define containers for each type of Office 365 objects. Click the title for an object type,
click New Container, and then configure the following settings:
i.
Container Name – Enter a name for this object container.
ii. Rule Name – Enter a name for the rule that will be used to filter objects.
iii. Configure rule settings by selecting a criterion, selecting a condition, and
selecting or entering a value. For more information about supported criteria,
refer to Appendix B: Supported Criteria in Dynamic Object Registration Rules.
*Note: When you select the Matches or Does Not Match condition, you can
enter a value that contains regular expressions.
AvePoint Online Services
17
iv. You can click the add ( ) button to add another criterion. With multiple
criteria, you must select the logic option And or Or.
▪
And – The objects that meet all criteria will be filtered to be included.
▪
Or – The objects that meet any one of the criteria will be filtered to be
included.
v. Click Save to save this container. The container settings are collapsed. You can
click the blank area next to the container name to edit the container settings or
click Remove to remove this container.
vi. You can click New Container and repeat the steps above to create another
container.
vii. If you define multiple containers, set the Priority.
b. If there is any object that does not meet the criteria in your rules, the object will not be
registered to the containers you defined. Select a resolution for the object:
o
Do not add them to any containers
o
Add them to the system default container
o
Add them to a custom container
If you choose this option, enter either an existing container name or a nonexisting container name. You can also click the select ( ) button to select an
existing container. If you enter a non-existing container name, AvePoint Online
Services will automatically create the container.
c. Click Finish. The Successfully created the profile page appears. The Default Express
Profile is created for the advanced mode registration, and you can click Go Back to the
Dynamic Object Registration Homepage to view the profile details.
*Note: The schedule of the registration is Daily; 00:00, which follows the time zone of your local
computer. When the schedule reaches, AvePoint Online Services will start the scan and registration
process. The whole process will be divided into multiple partial scans, so that you can manage and
monitor the registered objects flexibly, rather than waiting for the whole process to complete. When a
partial scan is finished, the detected objects will appear in your DocAve Online and Governance
Automation Online environment. You can also find them in the Scan History.
*Note: After you complete the registration wizard, you can also navigate to Dynamic Object
Registration to manage dynamic object registration. For example, you can modify the update schedule
of the default registration profile, create a new registration profile to connect to another Office 365
tenant, manage rules and containers, etc. For more information, refer to Managing Dynamic Object
Registration.
18
AvePoint Online Services
Starting Up AvePoint Online Services
The Home page provides the following views:
•
My Favorite Apps – This view displays the services you selected as favorites. Click a
service name to access that service.
You can click the heart (
•
All Apps – This view displays all services that your tenant has purchased or for which it
has started the trial. Click a service name to access that service.
You can click the heart (
•
) button to remove a service from your favorites.
) button to add a service to the My Favorite Apps view.
Store – This view displays all AvePoint online services within the AvePoint Online Service
platform. You can start trial for services that were not selected when using the 30-Day
Free Trial. For more information, refer to Starting the Trial on the Home Page.
AvePoint Online Services can be used in two ways, either by obtaining a full license or with a free trial.
*Note: The license for each online service is calculated in Greenwich Mean Time (GMT 0:00). Even if the
available license duration is less than 24 hours, it is calculated as one day.
If your tenant’s license type or license agreement of a service has changed, the new license agreement
will be displayed to the Tenant Owner when the Tenant Owner is trying to access the service. The
Tenant Owner must accept the new license agreement.
Obtaining a Full License
To obtain a full license for any of the AvePoint online services, contact AvePoint Sales.
Starting the Trial on the Home Page
If your tenant want to start a trial for services that were not selected when using the 30-Day Free Trial
from the AvePoint Online Services landing page, refer to the sections below to obtain the trial licenses of
services.
*Note: Only the Tenant Owner can start the trial.
AvePoint Cloud Backup Trial
On the Store tab, navigate to AvePoint Cloud Backup and click START TRIAL to get a 30-day trial license.
A pop-up window appears with the license agreement of the trial license displayed. Read the terms in
the agreement, and then you must click Accept to start the trial.
AvePoint Online Services
19
Then, you can click AvePoint Cloud Backup to access it. For detailed instructions on using AvePoint Cloud
Backup, refer to the AvePoint Cloud Backup User Guide.
AvePoint Cloud Management Trial
On the Store tab, navigate to AvePoint Cloud Management and click START TRIAL to get a 30-day trial
license. A pop-up window appears with the license agreement of the trial license displayed. Read the
terms in the agreement, and then you must click Accept to start the trial.
Then, you can click AvePoint Cloud Management to access it. You are brought to the DocAve Online
interface. The AvePoint Cloud Management service includes the following modules in DocAve Online:
•
Administrator
•
Content Manager
•
Replicator
•
Deployment Manager
•
Report Center
•
Identity Manager
For detailed instructions on using these modules, refer to the DocAve Online User Guide.
AvePoint Cloud Archiving
On the Store tab, navigate to AvePoint Cloud Archiving and click START TRIAL to get a 30-day trial
license. A pop-up window appears with the license agreement of the trial license displayed. Read the
terms in the agreement, and then you must click Accept to start the trial.
Then, you can click AvePoint Cloud Archiving to access it. You are brought to the DocAve Online
interface. The AvePoint Cloud Archiving service is the Archiver module in DocAve Online. For detailed
instructions on using Archiver, refer to the DocAve Online User Guide.
Governance Automation Online Trial
On the Store tab, navigate to Governance Automation Online and click START TRIAL to get a 30-day trial
license. A pop-up window appears with the license agreement of the trial license displayed. Read the
terms in the agreement, and then you must click Accept to start the trial.
Governance Automation Online integrates with AvePoint Cloud Management. To use Governance
Automation Online, you must also have an available AvePoint Cloud Management license. If you click
START TRIAL in Governance Automation Online when the trial license of AvePoint Cloud Management
has not started yet, the AvePoint Cloud Management 30-day trial license starts immediately.
20
AvePoint Online Services
Then, you can click Governance Automation Online to access it. For detailed instructions on using
Governance Automation Online, refer to the DocAve Governance Automation Online Administrator’s
Guide or the DocAve Governance Automation Online Business User’s Guide.
Compliance Guardian Online Trial
On the Store tab, navigate to Compliance Guardian Online and click START TRIAL to get a 30-day trial
license. A pop-up window appears with the license agreement of the trial license displayed. Read the
terms in the agreement, and then you must click Accept to start the trial.
Then, you can click Compliance Guardian Online to access it. For detailed instructions on using
Compliance Guardian Online, refer to the Compliance Guardian Online User Guide.
File Share Navigator Online Trial
On the Store tab, navigate to File Share Navigator Online and click START TRIAL to get a 30-day trial
license. A pop-up window appears with the license agreement of the trial license displayed. Read the
terms in the agreement, and then you must click Accept to start the trial.
Then, you can click File Share Navigator Online to access it. For detailed instructions on using File Share
Navigator Online, refer to the File Share Navigator Online User Guide.
DocAve Backup for Salesforce Trial
On the Store tab, navigate to DocAve Backup for Salesforce ® and click START TRIAL to get a 30-day trial
license. A pop-up window appears with the license agreement of the trial license displayed. Read the
terms in the agreement, and then you must click Accept to start the trial.
Then, you can click DocAve Backup for Salesforce ® to access it. For detailed instructions on using
DocAve Backup for Salesforce ®, refer to the DocAve Backup for Salesforce User Guide that can be
accessed by clicking the help (
) button within DocAve Backup for Salesforce ®.
AvePoint Cloud Insights Trial
On the Store tab, navigate to AvePoint Cloud Insights and click START TRIAL to get a 30-day trial license.
A pop-up window appears with the license agreement of the trial license displayed. Read the terms in
the agreement, and then you must click Accept to start the trial.
To use AvePoint Cloud Insights, you must enable the report data collection. For more information, refer
to Enabling Report Data Collection.
Then, you can click AvePoint Cloud Insights to access it. For detailed instructions on using AvePoint
Cloud Insights, refer to the AvePoint Cloud Insights User Guide.
AvePoint Online Services
21
Obtaining a License for Classic DocAve Backup
If your tenant signed up for AvePoint Online Services on or after June 18 th, 2017, the Granular Backup &
Restore and Exchange Online Backup & Restore modules in DocAve Online are not available to you. If
you need to use these modules, contact AvePoint Sales to obtain a trial or full license. After the license is
assigned to you, you can see the Classic DocAve Backup service in AvePoint Online Services homepage.
For detailed instructions on using these modules, refer to the DocAve Online User Guide.
22
AvePoint Online Services
AvePoint Online Services User Roles
In AvePoint Online Services, different user roles can perform different actions. There are three main
user roles:
•
Tenant Owner – This is the user whose account is used to sign up for AvePoint Online
Services. There is only one Tenant Owner per AvePoint Online Services tenant. A Tenant
Owner can perform the following actions:
o
Access online products (if there are available licenses)
o
View license information
o
Apply promotional codes
o
View and manage AvePoint Online Services users and permissions
o
Manage app profiles
o
Manage Office 365 service account profiles
o
Manage dynamic object registration
o
Manage encryption profiles
o
Enable report data collection
o
Export User Activity Report
o
View the notification center
o
Submit feedback
o
Edit personal profile information (as detailed in Managing Your Profile
Information)
•
Service Administrator – The Tenant Owner or another Service Administrator can add
Service Administrators to AvePoint Online Services. Service Administrators can perform
the same actions as the Tenant Owner.
•
Tenant User – The Tenant Owner and Service Administrators can add Tenant Users to
AvePoint Online Services. Tenant Users can be Standard Users or Application
Administrators.
o
o
Standard Users can perform the following actions in AvePoint Online Services:
▪
Access online products (if there are available licenses)
▪
Submit feedback
▪
Edit personal profile information (as detailed in Managing Your Profile
Information)
Application Administrators can:
▪
AvePoint Online Services
Access online products (if there are available licenses)
23
▪
Add Tenant Users and assign products to them. They can only assign the
products for which they are Application Administrators.
▪
Edit Tenant Users to change available products for them. They can only
select the products for which they are Application Administrators.
▪
Submit feedback
▪
Edit personal profile information (as detailed in Managing Your Profile
Information)
The role permissions for specific products vary by product, to learn more go to Adding Users for
information that is specific to your product.
24
AvePoint Online Services
Managing App Profiles
An app profile generates the app that AvePoint Online Services functionalities require. AvePoint Online
Services provides the following apps:
•
AvePoint Online Services Administration – This app connects AvePoint Online Services
to Office 365 or Salesforce.
•
AOS Administration – This app connects AvePoint Online Services to Yammer.
•
AvePoint Online Services Administration for Azure – This app connects AvePoint Online
Services to Microsoft Azure AD.
An app profile is required if one of the following circumstances are met:
•
•
•
•
•
App profile for Office 365:
o
You want to add Office 365 users/groups as AvePoint Online Services users and
want to enable single sign-on.
o
Your organization uses multi-factor authentication (MFA) in Office 365 and you
choose Use an app profile as the authentication method when creating a
dynamic object registration profile in AvePoint Online Services.
o
You want to use the Create Container feature in DocAve Online and your
organization uses multi-factor authentication in Office 365.
App profile for Salesforce:
o
You want to add Salesforce users as AvePoint Online Services users and want to
enable single sign-on.
o
You want to use DocAve Backup for Salesforce ® to back up and restore
Salesforce data.
App profile for Yammer:
o
You want to enable the integration between Governance Automation Online
and Yammer.
o
You want to use Compliance Guardian Online to scan Yammer.
App profile for Microsoft Azure AD:
o
You want to use the Identity Manager module in DocAve Online.
o
You want to manage Office 365 groups and users in Governance Automation
Online. For example, the Create User service.
App profile for Salesforce Sandbox: You want to use DocAve Backup for Salesforce ® to
back up and restore Salesforce Sandbox data.
If your complete the Connect to Get Started window, an app profile for Office 365 or Salesforce will be
automatically created.
AvePoint Online Services
25
The Tenant Owner and Service Administrators can access App Management by navigating to
Management > App Management. From this menu, you can create, view, search, re-authorize, and
delete app profiles.
Creating App Profiles
Refer to the instructions below to create app profiles for Office 365, Salesforce, Yammer, Microsoft
Azure AD, and Salesforce Sandbox.
Creating an App Profile for Office 365
To create an app profile for Office 365, complete the following steps:
1. Click Create on the App Management page.
2. In the pop-up window, choose Office 365.
3. Grant permissions to the app profile – Choose one of the following options to grant permissions
to the app profile you are about to create.
•
All permissions – Select this option to grant all permissions in Office 365 to the app
profile.
•
SharePoint Online permissions – Select this option to grant SharePoint Online
permissions to the app profile.
•
Exchange Online permissions – Select this option to grant Exchange Online permissions
to the app profile.
*Note: The permissions determine the types of objects that can be registered by dynamic object
registration profiles. For more information, refer to Appendix C: Objects Supported by Dynamic
Object Registration.
4. Creating an app profile for Office 365 requires an Office 365 Global Administrator account that
has the license for SharePoint Online assigned.
*Note: If your tenant is using or needs to use Exchange Online Backup and Restore in DocAve
Online, or needs to use AvePoint Cloud Backup to back up Exchange Online mailboxes or Office
365 groups, this account must have the license for Exchange Online assigned.
Choose one of the following options:
•
Use the current account – The currently signed in account will be used to create the app
profile.
i.
Choose this option and click OK.
ii. On the AvePoint Online Services Administration page, review the permissions
required for AvePoint Online Services and click Accept to continue.
26
AvePoint Online Services
•
Sign out and use another account – The currently signed in account will be signed out
and you need to sign into AvePoint Online Services with another account in order to
create the app profile.
i.
Choose this option and click OK.
ii. On the Office 365 Sign in page, enter the login ID and password of an Office 365
Global Administrator account. Then, click Sign in.
*Note: This account will be added as a Service Administrator of AvePoint Online
Services if the account does not already exist in any existing AvePoint Online
Services tenant.
iii. On the AvePoint Online Services Administration page, review the permissions
required for AvePoint Online Services and click Accept to continue.
The App Management page appears and the app profile is created successfully.
Creating an App Profile for Yammer
To create an app profile for Yammer, complete the following steps:
1. Click Create on the App Management page.
2. In the pop-up window, choose Yammer and click OK.
3. On the Yammer login page, enter the e-mail address and password of an account with the
Verified Admin privileges.
4. Click Allow to proceed.
The App Management page appears and the app profile is created successfully.
*Note: A Yammer organization can only have one Yammer app profile.
Creating an App Profile for Microsoft Azure AD
To create an app profile for Microsoft Azure AD, complete the following steps:
1. Click Create on the App Management page.
2. In the pop-up window, choose Microsoft Azure AD.
3. Creating an app profile for Microsoft Azure AD requires an Office 365 Global Administrator
account.
*Note: There is no license requirement for this account.
Choose one of the following options:
•
Use the current account – The currently signed in account will be used to create the app
profile.
AvePoint Online Services
27
i.
Choose this option and click OK.
ii. On the AvePoint Online Services Administration for Azure page, review the
permissions required for AvePoint Online Services and click Accept to continue.
•
Sign out and use another account – The currently signed in account will be signed out
and you need to sign into AvePoint Online Services with another account in order to
create the app profile.
i.
Choose this option and click OK.
ii. On the Office 365 Sign in page, enter the login ID and password of an Office 365
Global Administrator account. Then, click Sign in.
iii. On the AvePoint Online Services Administration for Azure page, review the
permissions required for AvePoint Online Services and click Accept to continue.
The App Management page appears and the app profile is created successfully.
Creating an App Profile for Salesforce
To create an app profile for Salesforce, complete the following steps:
1. Click Create on the App Management page.
2. In the pop-up window, choose Salesforce.
3. Creating an app profile for Salesforce requires a Salesforce account with the System
Administrator profile or another profile that has the same permissions as those of the System
Administrator profile. Choose one of the following options:
•
Use the current account – The currently signed in account will be used to create the app
profile.
i.
Choose this option and click OK.
ii. On the Allow Access page, review the permissions required for AvePoint Online
Services and click Allow to continue.
•
Sign out and use another account – The currently signed in account will be signed out
and you need to sign into AvePoint Online Services with another account to create the
app profile.
i.
Choose this option and click OK.
ii. On the Salesforce login page, enter the login ID and password of a Salesforce
account. Then, click Log In.
iii. On the Allow Access page, review the permissions required for AvePoint Online
Services and click Allow to continue.
The App Management page appears and the app profile is created successfully.
28
AvePoint Online Services
Creating an App Profile for Salesforce Sandbox
To create an app profile for Salesforce Sandbox, complete the following steps:
1. Click Create on the App Management page.
2. In the pop-up window, choose Salesforce Sandbox and click OK.
3. Creating an app profile for Salesforce Sandbox requires a Salesforce Sandbox account with the
System Administrator profile or another profile that has the same permissions as those of the
System Administrator profile.
a. On the Salesforce Sandbox login page, enter the login ID and password of a Salesforce
Sandbox account. Then, click Log In to Sandbox.
b. On the Allow Access page, review the permissions required for AvePoint Online Services
and click Allow to continue.
The App Management page appears and the app profile is created successfully.
Searching for Existing App Profiles
To search for specific app profiles, enter the keyword in the text box on the upper-right corner, and click
the search ( ) button or press Enter. When app profiles are displayed on multiple pages, enter an
integer in the text box after Page on the lower-right corner of the page to go to your desired page.
Re-authorizing AvePoint Online Services Administration App
The AvePoint Online Services Administration app needs to be authorized by all app profiles for Office
365, Salesforce, and Salesforce Sandbox. The app profiles whose statuses are App Authorization Expired
must be re-authorized. You can also re-authorize the app for an active app profile if you want to change
the Office 365/Salesforce/Salesforce Sandbox account used to authorize the app.
Refer to the instructions below to re-authorize the app for Office 365, Salesforce, or Salesforce Sandbox.
Re-authorizing the App for Office 365
Complete the following steps to re-authorize the AvePoint Online Services Administration app for an
Office 365 app profile:
1. Select an app profile for Office 365 and click Re-authorize App on the ribbon.
2. The Re-authorize App action requires an Office 365 Global Administrator account that has the
license for SharePoint Online assigned.
*Note: If your tenant is using or needs to use Exchange Online Backup and Restore in DocAve
Online, this account must have the license for Exchange Online assigned.
AvePoint Online Services
29
Choose one of the following options in the pop-up window:
•
•
Use the current account – The currently signed in account will be used to authorize the
app.
i.
Choose this option and click OK.
ii.
On the AvePoint Online Services Administration page, review the permissions
required for AvePoint Online Services and click Accept to continue.
Sign out and use another account – The currently signed in account will be signed out
and you need to sign into AvePoint Online Services with another account to authorize
the app.
i.
Choose this option and click OK.
ii.
On the Office 365 Sign in page, enter the login ID and password of an Office 365
Global Administrator account. Then, click Sign in.
*Note: This account will be added as a Service Administrator of AvePoint Online
Services if it does not exist in any existing AvePoint Online Services tenant.
iii.
On the AvePoint Online Services Administration page, review the permissions
required for AvePoint Online Services and click Accept to continue.
The App Management page appears and the AvePoint Online Services Administration app is successfully
authorized for the selected tenant profile.
Re-authorizing the App for Salesforce
Complete the following steps to re-authorize the AvePoint Online Services Administration app for a
Salesforce app profile:
1. Select an app profile for Salesforce and click Re-authorize App on the ribbon.
2. The Re-authorize App action requires a Salesforce account with the System Administrator
profile or another profile that has the same permissions as the System Administrator profile.
Choose one of the following options in the pop-up window:
•
Use the current account – The currently signed in account will be used to authorize the
app.
i.
Choose this option and click OK.
ii. On the Allow Access page, review the permissions required for AvePoint Online
Services and click Allow to continue.
•
Sign out and use another account – You will be logged out of the current account and
you need to sign into AvePoint Online Services with another account to authorize the
app.
i.
30
Choose this option and click OK.
AvePoint Online Services
ii. On the Salesforce login page, enter the login ID and password of a Salesforce
account. Then, click Log In.
iii. On the Allow Access page, review the permissions required for AvePoint Online
Services and click Allow to continue.
The App Management page appears and the AvePoint Online Services Administration app is successfully
authorized for the selected tenant profile.
Re-authorizing App for Salesforce Sandbox
Complete the following steps to re-authorize the AvePoint Online Services Administration app for a
Salesforce Sandbox app profile:
1. Select an app profile for Salesforce Sandbox and click Re-authorize App on the ribbon.
2. The Re-authorize App action requires a Salesforce Sandbox account with the System
Administrator profile or another profile that has the same permissions as the System
Administrator profile.
a. On the Salesforce Sandbox login page, enter the login ID and password of a Salesforce
Sandbox account. Then, click Log In to Sandbox.
b. On the Allow Access page, review the permissions required for AvePoint Online Services
and click Allow to continue.
The App Management page appears and the AvePoint Online Services Administration app is successfully
authorized for the selected tenant profile.
Re-authorizing the AOS Administration App
The AOS Administration app needs to be authorized by the app profile for Yammer. App profiles with
the App Authorization Expired status must be re-authorized. You can also re-authorize the app for an
active app profile if you want to change the Yammer account used to authorize the app.
Complete the following steps to re-authorize the app:
1. Select the app profile for Yammer and click Re-authorize App on the ribbon.
2. The Re-authorize App action requires a Yammer account with the Verified Admin privileges. On
the Yammer login page, enter the e-mail address and password.
3. Click Log In.
The App Management page appears and the app registered for AvePoint Online Services is successfully
authorized for the selected tenant profile.
AvePoint Online Services
31
Re-authorizing the AvePoint Online Services Administration for
Azure App
The AvePoint Online Services Administration for Azure app needs to be authorized by the app profile for
Microsoft Azure AD. The app profile whose status is App Authorization Expired must be re-authorized.
You can also re-authorize the app for an active app profile if you want to change the Offi ce 365 account
used to authorize the app.
Complete the following steps to re-authorize the app:
1. Select an app profile for Microsoft Azure AD and click Re-authorize App on the ribbon.
2. The Re-authorize App action requires an Office 365 Global Administrator account.
*Note: There is no license requirement for this account.
Choose one of the following options in the pop-up window:
•
Use the current account – The currently signed in account will be used to authorize the
app.
i.
Choose this option and click OK.
ii. On the AvePoint Online Services Administration for Azure page, review the
permissions required for AvePoint Online Services and click Accept to continue.
•
Sign out and use another account – You will be logged out of the current account and
you need to sign into AvePoint Online Services with another account to authorize the
app.
i.
Choose this option and click OK.
ii. On the Office 365 Sign in page, enter the login ID and password of an Office 365
Global Administrator account. Then, click Sign in.
iii. On the AvePoint Online Services Administration for Azure page, review the
permissions required for AvePoint Online Services and click Accept to continue.
The App Management page appears and the AvePoint Online Services Administration for Azure app is
successfully authorized for the selected tenant profile.
Editing Admin Center URL in an App Profile for Office 365
In an app profile for Office 365, your tenant’s SharePoint Online admin center URL is retrieved and
stored. If your tenant’s admin center URL is changed, you can edit the admin center URL in the app
profile.
Complete the following steps to edit the admin center URL:
32
AvePoint Online Services
1. Click the profile name of the app profile.
2. Click Edit next to the current admin center URL.
3. Change the domain name in the text box.
4. Click Save to save your change.
Deleting App Profiles
To delete one or more app profiles, select the checkboxes next to the profile names and click Delete on
the ribbon.
If an app profile is applied in the User Management to add Office 365 users/groups or Salesforce users,
and users of the same tenant exist in AvePoint Online Services, the profile cannot be deleted.
AvePoint Online Services
33
Managing AvePoint Online Services Users
To manage AvePoint Online Services users, navigate to Management > User Management. On the User
Management page, the Tenant Owner, Service Administrators, and Application Administrators can use
the following two views to manage AvePoint Online Services users and permissions:
•
User-based View – This view displays all AvePoint Online Services users based on the
user ID. The viewer will see the user ID, sign-in method, the user ID’s role, available
product, user type, and status.
•
Product-based View – This view displays all AvePoint Online Services users based on the
product name, together with the user ID’s status.
*Note: In the Product-based View, only Tenant Users and the products that they can
access are visible.
Click either User-based View or Product-based View to display that view type. Tenant Owner and
Service Administrators can perform the following actions:
•
Adding Users
•
Searching for Existing Users
•
Editing a User’s Permissions
•
Editing Multiple Users’ Permissions
•
Deactivating User Accounts
•
Activating User Accounts
•
Unlocking User Accounts
•
Deleting Users
*Note: Logged-in users (the Tenant Owner or Service Administrators) cannot edit, deactivate, or delete
their own accounts.
Application Administrators can perform the following actions:
•
Adding Users
*Note: Application Administrators can only add Tenant Users and assign the products
for which they are Application Administrators.
•
Searching for Existing Users
•
Editing a User’s Permissions/Editing Multiple Users’ Permissions
*Note: Application Administrators can only change available products for Tenant Users,
and they can only select the products for which they are Application Administrators.
*Note: Logged-in users (the Application Administrators) cannot edit their own accounts.
34
AvePoint Online Services
Adding Users
To add users and grant user permissions to AvePoint Online Services and other online products,
complete the following steps.
1. With the User-based View activated, click Add Users.
2. On the Add Users page, configure the following settings:
a. Sign-in Method – Select the sign-in method from the drop-down list.
o
Local User – The local system will check the user’s credentials.
o
Office 365 User/Group – Office 365 users and groups will become AvePoint
Online Services users. They can use their Office 365 login IDs to log into
AvePoint Online Services.
o
Salesforce User – Salesforce users will become AvePoint Online Services users.
They can use their Salesforce login IDs to log into AvePoint Online Services.
b. App Profile – This option only appears if Office 365 User/Group or Salesforce User is
selected as the sign-in method. An app profile is required to add or verify Office 365
users/groups or Salesforce users. Select a previously configured app profile or click New
App Profile. For more information, refer to Creating an App Profile.
c. Add Users – Specify the users that you are about to add into AvePoint Online Services.
o
For Local User, enter valid e-mail addresses in the format of
[email protected].
o
For Office 365 User/Group or Salesforce User, enter the Office 365/Salesforce
login IDs of the users in the format of [email protected] or enter the
names of Office 365 groups, then click the check ( ) button to check whether
the users or groups are valid.
You can also click the browse ( ) button to view the users or groups within the
selected profile, and then select your desired users or groups.
▪
To search a specific user, enter the keywords of the user’s Office
365/Salesforce login ID, first name, or last name.
▪
To search a specific Office 365 group, enter the keywords of the group’s
display name.
Then, click the search ( ) button.
Note the following:
▪
AvePoint Online Services
When an Office 365 group is added, the users in that group will become
AvePoint Online Services users. If the Office 365 group has nested
groups, AvePoint Online Services will only add users to the first five
layers.
35
▪
If you select Office 365 User/Group as the sign-in method, you can
enter or select Everyone. Everyone refers to all available users
(excluding external users) in your Office 365 tenant’s Azure AD. If you
add Everyone as AvePoint Online Services users, all available users can
sign into AvePoint Online Services and perform the corresponding
actions according to the assigned role and available products.
▪
If you select Office 365 User/Group as the sign-in method, you can add
external users. You need to add external users and assign Governance
Automation Online to them if the following circumstance are met:
Your SharePoint Online site collections or sites are shared to external
users.
The shared site collections or sites contain Governance Automation
Online app part.
*Note: After you add external users here, they can view the app part
when accessing the shared site collections or sites, but they cannot log
into AvePoint Online Services.
d. Role – Select the user role. If you select Tenant User, proceed to the next step. If you
select Service Administrator, go directly to step 3.
e. Available Product – Select the products that the user should be able to access and then
select the permissions for the users. The products available for selection depend on
your license. If your license for a specific product has expired, the product is unavailable
for selection.
Product
DocAve Online
(Includes the AvePoint Cloud
Management, AvePoint Cloud Archiving,
and Classic DocAve Backup services)
Governance Automation Online
36
User Type
Standard User
A standard user can be delegated access
to SharePoint Online site collections and
DocAve Online management tools.
Application Administrator
The application administrator fulfills the
role of a Power User. Power Users have
full control of DocAve Online
management tools as well as profile and
plan settings.
Standard User
A standard user fulfills the role of a
Business User. Business users can make
and track service requests, approve or
reject assigned tasks, and manage site
collections they own.
Application Administrator
The application administrator fulfills the
role of the IT Administrator. The IT
AvePoint Online Services
Product
AvePoint Cloud Backup
Compliance Guardian Online
File Share Navigator Online
DocAve Backup for Salesforce ®
AvePoint Cloud Insights
AvePoint Online Services
User Type
Administrator can create or modify
service request definitions and manage
Governance Automation Online settings.
Standard User
A standard user can configure backup and
restore settings, perform backup and
restore, view activity report, etc.
Application Administrator
In addition to the abilities of a Standard
User, Application Administrators can add
Tenant Users and assign AvePoint Cloud
Backup to them.
Standard User
A standard user is assigned permissions
to use Compliance Guardian Online, but
the standard users cannot extend a
license, use Account Manager, or use Test
Suite Manager in Compliance Guardian
Online.
Application Administrator
The application administrator fulfills the
role of a Power User. Power Users have
Full Control permissions to use
Compliance Guardian Online. Users with
Full Control can perform all available
functions in Compliance Guardian Online.
Application Administrator
The application administrator can
manage the File Share Navigator Online
Administration Service connections and
configure the scheduled job account.
Standard User
A standard user must be added into a
user group in DocAve Backup for
Salesforce ® by Administrators for using
the specific features according to the
permissions granted to the user group.
Application Administrator
The application administrator fulfills the
role of an Administrator. The
Administrator can perform
backup/restore jobs, export backup data
to CSV, download reports, and manage
DocAve Backup for Salesforce ® settings.
Application Administrator
37
Product
AvePoint Permissions Manager
AvePoint Perimeter Online
User Type
The application administrator can view
statistics about all site collections in your
SharePoint Online environment.
Standard User
A standard user can only view statistics
about the site collections for which they
have the role of primary administrator or
site owner.
Standard User
A standard user can only view or edit the
objects in the scope that they have
permissions to.
Application Administrator
The application administrators can
manage licenses, users, and permissions
of the selected scopes, configure
customized settings, and generate
reports.
Standard User
A standard user can grant permissions to
external users, view Share Details of
shared items, view the personal
dashboard and export all reports in
Sharer/Collaborator view, and view the
content in My Shared Files page in the
AvePoint Perimeter Online portal.
Application Administrator
The application administrators have the
Full Control permission to use AvePoint
Perimeter Online. With the Full Control
permission, users can use all available
functions in AvePoint Perimeter Online.
3. If you select AvePoint Cloud Insights in the Available Product field, the Available Report field
appears. Select one or more reports that will be available to the users.
4. Click Save to save your configurations, or click Cancel to cancel your configurations.
5. Users with the user type of Local User will receive invitation e-mails. They must activate the user
IDs first by clicking the link provided in the e-mail, and then use the user ID and password in the
invitation e-mails to log into AvePoint Online Services.
38
AvePoint Online Services
Searching for Existing Users
To search for specific users, enter a name in the text box on the upper-right corner, and click the search
( ) button or press Enter. When users are displayed on multiple pages, enter an integer in the text box
after Page on the lower-right corner of the interface to go to your desired page.
Editing a User’s Permissions
To edit a user’s permissions, complete the following steps:
1. With the User-based View activated, select a user and click Edit on the ribbon.
2. On the Edit User page, the user ID of the selected user is displayed. Configure the following
settings to edit user’s permissions:
a. Role – Choose the role Tenant User or Service Administrator.
b. If you choose Tenant User, you can choose from the available products. For more
information about how to select the available products, refer to Available Products.
c. Status – Choose the status for the selected users, Activated or Deactivated.
3. Click Save on the ribbon to save your changes, or click Cancel on the ribbon to cancel your
changes.
Editing Multiple Users’ Permissions
To edit multiple users’ permissions, complete the following steps:
1. With the User-based View activated, select multiple users and click Edit on the ribbon.
2. On the Edit User page, the user IDs of the selected users are displayed. Configure the following
settings to edit users’ permissions:
a. Role – Choose the role Tenant User or Service Administrator.
b. If you choose Tenant User, you can further configure the following settings:
o
Available Product – Choose the available products for these users. For more
information about how to select the available products, refer to Available
Products.
o
License Change Logic – Choose the logic to change the license for the available
products.
▪
AvePoint Online Services
Merge – The newly selected available products for the selected users
will be merged to the existing ones. Any products the users previously
had access to will remain.
39
▪
Replace – The newly selected available products for the selected users
will replace the existing ones. Any products not selected here but
previously assigned to the users will be removed.
c. Status – Choose the status for the selected users, Activated or Deactivated.
3. Click Save on the ribbon to save your changes, or click Cancel on the ribbon to cancel your
changes.
Deactivating User Accounts
To deactivate a user, navigate to User Management > User-based View. Select the users to deactivate
and then click Deactivate on the ribbon. Deactivated users are not removed from the system, but are
restricted from accessing the system.
*Note: If the user who registered with AvePoint Online Services is deactivated, the Tenant Owner role
will be granted to the Service Administrator who deactivated the Tenant Owner. If the old Tenant
Owner’s account is reactivated, the user will be assigned to the Service Administrator role.
Activating User Accounts
To activate users, navigate to User Management > User-based View. Select the users to activate and
click Activate on the ribbon.
Unlocking User Accounts
If a user enters an incorrect password more than three times, the user account will be locked. A Service
Administrator can unlock a locked out user.
To unlock a locked user account, navigate to User Management > User-based View. Select the user with
a locked status, and click Unlock on the ribbon.
*Note: If Service Administrator does not unlock a locked user account, after an hour, the locked account
will automatically unlock and the user can try to log in again.
Deleting Users
To delete users, navigate to User Management > User-based View. Select the users that you will delete
and then click Delete on the ribbon. All of the users’ profiles and system information will be deleted.
40
AvePoint Online Services
Managing Office 365 Service Account Profiles
An Office 365 service account profile is required in AvePoint Online Services dynamic object registration
profile and in DocAve Online Create Container feature.
The Tenant Owner and Service Administrators can manage Office 365 service account profiles by
navigating to Management > Office 365 Service Account. From this menu, you can perform the
following actions:
•
Creating a Service Account Profile
•
Searching for Existing Service Account Profiles
•
Editing a Service Account Profile
•
Deleting Service Account Profiles
Creating a Service Account Profile
To create a service account profile, click Create on the ribbon, and configure the following settings on
the Create Service Account Profile page.
1. Profile Name – Enter a name for the service account profile.
2. Description – Enter an optional description.
3. Enable MFA – If your organization uses multi-factor authentication in Office 365, select the Our
organization uses multi-factor authentication checkbox.
4. Username – Enter the login ID of an Office 365 Global Administrator account, SharePoint Online
Administrator account, or Exchange Online Administrator account.
5. Password – If your Office 365 tenant does not have MFA enabled, enter the login password of
the account above. If MFA is enabled, enter the app password of the account above. For more
information about app password, refer to the Microsoft technical article
https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-enduser-app-passwords/.
6. Click Validation Test to validate the information above. The user role will be automatically
displayed in the User Role field.
7. SharePoint Online Admin Center URL – If your organization uses the default SharePoint Online
admin center URL in Office 365, select the Our organization uses the default SharePoint Online
admin center URL option, and the admin center URL will be displayed; if your organization uses
a custom SharePoint Online admin center URL in Office 365, select the Our organization uses a
custom SharePoint Online admin center URL option, and enter the admin center URL in the text
box.
*Note: If the Our organization uses multi-factor authentication checkbox is selected, you must
manually enter the SharePoint Online admin center URL in the text box.
AvePoint Online Services
41
8. Enable E-mail Notification – Choose whether to Send e-mail notification to Service
Administrators when the account fails to connect to Office 365. The failed connection occurs
when the configured account is deleted from Office 365, or when the account’s password is
changed. The e-mail notification will be sent every day if the connection continues to fail.
9. Click Save to save your configurations, or click Cancel to go back to the Office 365 Service
Account page without saving any configurations.
Searching for Existing Service Account Profiles
To search for specific service account profiles, enter keywords of the profile name in the text box on the
upper-right corner, and click the search (
) button or press Enter.
Editing a Service Account Profile
To edit a service account profile, select the profile and click Edit on the ribbon.
You can edit the following fields: Description, Enable MFA, Username, and Password.
Deleting Service Account Profiles
To delete one or more service account profiles, select the profiles and click Delete on the ribbon. A popup window appears asking for your confirmation. Click OK to confirm your deletion.
42
AvePoint Online Services
Managing Account Pool
An account pool contains multiple Office 365 accounts. When AvePoint Online Services registers
SharePoint Online site collections and OneDrive for Business, AvePoint Online Services grants the site
collection administrator permission to these Office 365 accounts. With the credentials of these
accounts, AvePoint Cloud Backup can manage a large amount of data simultaneously.
To build an account pool in AvePoint Online Services, create a group in Office 365 first. The group type
can be Office 365 group, mail-enabled security group, or security group. This group should contain a
certain number of users, and these users can be unlicensed in Office 365.
Then, navigate to the Office 365 Service Account page and click Manage Account Pool on the ribbon.
On the Manage Account Pool page, configure the following settings:
1. Select a Tenant – Select a tenant from the drop-down list. The tenant is retrieved from the
previously configured app profile or Office 365 service account profile.
*Note: If you want to add more tenants, click the Office 365 Service Account or App
Management link to go to the corresponding page and create new profiles. Then, the tenants
can be retrieved here.
2. Group – Enter the name of the group you prepared. Group members will be displayed in the
Group Users field.
Note the following:
•
If the account of a user exists in a service account profile, the password will be
automatically filled in the text box. Otherwise, you must enter the password manually.
•
If the account of a user has multi-factor authentication enabled in Office 365, click the
turn on (
) button to enable MFA, and then enter the app password of this account.
3. Custom SharePoint Online Admin Center URL – If you enable MFA for one or more accounts,
you must enter your SharePoint Online admin center URL in the text box.
4. Enable E-mail Notification – Choose whether to Send e-mail notification to Service
Administrators when any group users are deleted or their passwords are changed.
5. Click Save to save your configurations, or click Cancel to go back to the Office 365 Service
Account page without saving any configurations. You can also click Reset to clear the account
pool of the selected tenant.
*Note: After an account pool for a tenant is saved, the account pool will take effect on the next
dynamic object registration scan job.
AvePoint Online Services
43
Managing Encryption Profiles
Encryption profiles allow you to use Azure Key Vault to encrypt backup data and tenant sensitive
information (Office 365 usernames, passwords, etc.).
The Tenant Owner and Service Administrators can manage encryption profiles by navigating to
Management > Encryption Management. From this menu, you can perform the following actions:
•
Creating an Encryption Profile
•
Applying an Encryption Profile
•
Searching for Existing Encryption Profiles
•
Editing an Encryption Profile
•
Deleting Encryption Profiles
*Note: AvePoint provides a default encryption profile. If your tenant signed up to AvePoint Online
Services after October 16th 2016, the default encryption profile is automatically applied. You can also
create a custom encryption profile and apply it. If your tenant signed up to AvePoint Online Services
before October 16th 2016, the default encryption profile is not automatically applied. You can choose to
apply the default encryption profile, or create a custom encryption profile and apply it.
Preparations
The encryption profile requires some properties of a key vault. Before creating an encryption profile,
create a key vault in Azure Key Vault first. For details, refer to the Microsoft Azure Key Vault
Documentation. Then, perform some pre-checking on the key vault.
1. Log into https://portal.azure.com.
2. Click All resources on the left pane.
3. Click a key vault and click Access policies on the middle pane.
4. Click a resource group and click Key permissions.
5. On the Key permissions pane, make sure that at least the following operations are selected:
Get, Encrypt, and Decrypt.
6. Navigate to the pane for key vault settings, and click Keys.
7. Click a key, and click a version of the key.
8. In the Permitted operations section, make sure that at least Encrypt and Decrypt are selected.
9. Copy the key identifier that resides in the Properties section. When you create an encryption
profile in AvePoint Online Services, you will need to provide this key identifier.
Apart from the pre-checking above, AvePoint Online Services recommends that you back up the key in
case that the key is deleted accidentally. If a key has been applied to AvePoint Online Services
44
AvePoint Online Services
encryption profile to encrypt data, and the key is deleted with no backup, the encrypted data will be
damaged and AvePoint Online Services cannot work for you smoothly.
Creating an Encryption Profile
To create an encryption profile, click Create on the ribbon, and configure the following settings on the
Create Encryption Profile page.
1. Profile Name – Enter a name for the encryption profile.
2. Description – Enter an optional description.
3. Key Identifier – Enter the key identifier of your key vault.
4. Client ID – Enter the client ID of your key vault.
5. Client Secret – Enter the client secret of your key vault.
6. Click Validation Test to validate your key vault information.
7. Click Save to save your configurations, or click Cancel to go back to the Encryption Management
page without saving any configurations.
Applying an Encryption Profile
To apply the key vault of an encryption profile to encrypt backup data and tenant sensitive information,
select the encryption profile and click Apply on the ribbon. A pop-up window appears asking for your
confirmation. Click OK to apply the encryption profile. The Being Used label is displayed next to the
profile name.
Searching for Existing Encryption Profiles
To search for specific encryption profiles, enter keywords of the profile name in the text box on the
upper-right corner, and click the search (
) button or press Enter.
Editing an Encryption Profile
To edit an encryption profile, select a profile and click Edit on the ribbon. On the Edit Profile page, you
can edit Profile Name and Description.
*Note: The Default Encryption Profile and the encryption profile that is being used cannot be edited.
Deleting Encryption Profiles
To delete one or more encryption profiles, select the profiles and click Delete on the ribbon. A pop-up
window appears asking for your confirmation. Click OK to confirm your deletion.
AvePoint Online Services
45
Managing Dynamic Object Registration
The Dynamic Object Registration feature automatically registers the following objects in your Office 365
environment:
•
SharePoint Online site collections
•
OneDrive for Business
•
Exchange Online mailboxes
•
Office 365 groups (including group team sites and group mailboxes)
The detected objects will appear in your DocAve Online and Governance Automation Online
environment. AvePoint Online Services will automatically monitor for updates, creation, and deletion of
these objects. For conflicted containers and deleted objects, the result depends on the Dynamic Object
Registration Settings configured in DocAve Online.
The Tenant Owner and Service Administrators can use Dynamic Object Registration by clicking Dynamic
Object Registration on the left pane.
If your tenant has enabled dynamic object registration via the registration wizard, you can perform the
following actions on the Dynamic Object Registration page.
*Note: If this is the first time that your tenant is using dynamic object registration, you must first create
a registration profile. For more information, refer to Creating a Dynamic Object Registration Profile.
•
Editing a Dynamic Object Registration Profile
•
Deleting Dynamic Object Registration Profile
•
Viewing Scan History
•
Viewing Dynamic Object Registration Settings
•
Managing Rules
Creating a Dynamic Object Registration Profile
To create a dynamic object registration profile, click Create on the ribbon, and then configure the
following settings:
1. Registration Profile Name – Enter a name for the profile.
2. Description – Enter an optional description for the profile.
3. Authentication Method – Choose an authentication method according to the scenarios below:
•
46
If you only want to register Exchange Online mailboxes and/or Office 365 group
mailboxes and back up them in DocAve Online, choose either Use a service account
profile or Use an app profile. AvePoint recommends that you choose the Use an app
AvePoint Online Services
profile method. App only permissions utilize modern authentication in place of a service
account.
•
If your organization does not have multi-factor authentication enabled in Office 365,
choose the Use a service account profile method and select a service account profile.
•
If your organization is using multi-factor authentication in Office 365, choose the Use an
app profile method. Then, select an app profile for Office 365 and select a service
account profile with MFA enabled.
For detailed information about objects that can be registered by dynamic object registration
profiles with different authentication methods, refer to Appendix C: Objects Supported by
Dynamic Object Registration.
*Note: If the Use an app profile method is selected, due to the limitation of Microsoft Graph
API, AvePoint Online Services cannot scan Exchange Online in-place archived mailboxes.
*Note: When AvePoint Online Services scans SharePoint Online site collections and OneDrive for
Business, AOS will check if the Office 365 Global Administrator account specified in the related
service account profile already has the site collection administrator permission to site
collections and OneDrive for Business. If the Global Administrator does not have this permission,
AOS will assign the site collection administrator permission to this Global Administrator, so that
AOS can retrieve required properties that will be used by Dynamic Object Registration and
DocAve Online jobs. When the scan and filter process is finished, the Global Administrator
account’s site collection administrator permission on the object will be removed if the object is
not added into any dynamic containers.
To get the latest profiles in the drop-down lists when you configure the authentication method,
click the refresh ( ) button next to the corresponding drop-down list.
4. Registration Mode – If your authentication method is Use a service account profile, choose
Express Mode or Advanced Mode. If your authentication method is Use an app profile, only
Express Mode is available.
•
The advanced mode provides rules, which allow you to define how Office 365 objects
are detected and grouped in online products. This can make management of those
objects a lot easier.
•
If you do not have a lot of Office 365 objects, you can use the express mode where all
objects are clustered within their default containers.
5. Update Schedule – Choose to run scheduled registration or one-time registration by selecting
one of the following options:
•
Set up a registration schedule – Select this option to set the daily update schedule, and
then select the time for AvePoint Online Services to scan and update your Office 365
objects.
AvePoint Online Services
47
•
Start a one-time registration now – Select this option to make AvePoint Online Services
run a one-time scan for your Office 365 objects immediately. If you select this option,
the scan will not run again.
*Note: The selected time follows the time zone of your local computer.
6. Choose whether or not to Enable this profile to automatically remove objects that no longer
match registration rules by selecting Yes or No.
•
No – If you select No, objects that no longer match registration rules will not be
automatically removed from dynamic containers.
•
Yes – If you select Yes, objects that no longer match registration rules will be
automatically removed from dynamic containers, and you can choose whether to Send
e-mail notification to me when the objects are removed. If you enable this option,
enter an e-mail address in the text box. When any objects are automatically removed
from dynamic containers, an e-mail notification will be sent to the configured e-mail
address
*Note: By default, the conflict resolution in DocAve Online Dynamic Object Registration
Settings is Merge, and this remove action will be synchronized to DocAve Online. The DocAve
Online plans that contain the related objects will be affected, and you must to reconfigure those
plans after the registration process is complete.
7. Choose whether or not to Enable this profile to automatically remove objects that were
deleted in Office 365 by selecting Yes or No.
*Note: If you select Yes, objects that were deleted in Office 365 will be automatically removed
from dynamic containers. If you also want these objects to be removed from the containers in
DocAve Online, navigate to DocAve Online Control Panel > Dynamic Object Registration
Settings and select Replace as the conflict resolution.
8. If you choose Express Mode, click Finish. The profile is created successfully. When the schedule
reaches, AvePoint Online Services will start the scan and registration process. The whole process
will be divided into multiple partial scans, so that you can manage and monitor the regi stered
objects flexibly, rather than waiting for the whole process to complete. When a partial scan is
finished, the detected objects will appear in your DocAve Online and Governance Automation
Online environment. You can also find them in the Scan History.
If you choose Advanced Mode, Click Next, and then configure the Advanced Mode settings.
Advanced Mode
For organizations with over 300 users, AvePoint recommends that you use this mode to register your
Office 365 objects dynamically to custom containers according to business rules.
If you choose this mode, complete the following steps:
1. Define containers for each type of Office 365 objects. Click the title for an object type, click New
Container, and then configure the following settings:
48
AvePoint Online Services
a. Container Name – Enter a name for this object container.
b. Rule Name – Enter a name for the rule that will be used to filter objects.
c. Configure rule settings by selecting a criterion, selecting a condition, and selecting or
entering a value. For more information about supported criteria, refer to Appendix B:
Supported Criteria in Dynamic Object Registration Rules.
*Note: You can click Copy from Existing Rules to reuse rule settings. In the pop-up
window, all rules are displayed. Click Copy Criteria or Copy Criteria and Values.
*Note: For the newly created dynamic object registration profile, the criteria of the
Office 365 Group Mailbox and Office 365 Group Team Site are combined into the Office
365 Group.
d. You can click the add ( ) button to add another criterion. With multiple criteria, you
must select the logic option And or Or.
o
And – The objects that meet all criteria will be filtered to be included.
o
Or – The objects that meet any one of the criteria will be filtered to be included.
e. Click Save to save this container. The container settings are collapsed. You can click the
blank area next to the container name to edit the container settings or click Remove to
remove the container from the profile.
f.
You can click New Container and repeat the steps above to create another group.
g. If you define multiple containers, set a container’s priority by selecting a number from
the Priority drop-down list.
2. If there is any object that does not meet the criteria in your rules, the object will not be
registered to the containers you defined. Select a resolution for the object:
•
Do not add them to any containers
•
Add them to system default containers
•
Add them to a custom container
If you choose this option, enter either an existing container name or a non-existing
container name. You can also click the select ( ) button to select an existing container.
You can enter either an existing container name or a non-existing container name. If you
enter a non-existing container name, AvePoint Online Services will automatically create
the container.
3. Click Finish. The profile is created successfully. When the schedule reaches, AvePoint Online
Services will start the scan and registration process. The whole process will be divided into
multiple partial scans, so that you can manage and monitor the registered objects flexibly,
rather than waiting for the whole process to complete. When a partial scan is finished, the
AvePoint Online Services
49
detected objects will appear in your DocAve Online and Governance Automation Online
environment. You can also find them in the Scan History.
Editing a Dynamic Object Registration Profile
To edit a dynamic object registration profile, select the profile and click Edit on the ribbon. Then, edit
the profile settings. For more information about the profile settings, refer to Creating a Dynamic Object
Registration Profile.
*Note: The "Office 365 Group Team Site" and "Office 365 Group Mailbox" object types have been
integrated into "Office 365 Group". If you wish to define custom containers for Office 365 groups, the
previously created custom containers for Office 365 group team sites and Office 365 group mailboxes
will be unavailable and cannot be edited.
*Note: When you are editing a container and click Remove in the right pane, the container is just
removed from the current profile and it is not deleted. If you want to delete the container or remove
objects from the container, navigate to the Dynamic Object Registration page and click Manage
Containers. For detailed instructions, refer to Managing Containers.
*Note: When you are editing a previously created dynamic object registration profile that has defined
containers for Office 365 group team sites and Office 365 group mailboxes, you can view and edit the
rules of the containers. However, if you create any containers for an Office 365 Group and save the
dynamic object registration profile, the new registration process will scan Office 365 group objects
according to the rules of the custom Office 365 group containers. After the new registration process
completes, the objects previously registered to the Office 365 group team site and Office 365 group
mailbox containers will be removed, and the objects will be placed in the corresponding new containers
if they match the rules. The DocAve Online plans that contain the previously registered objects will be
affected. You need to reconfigure those plans after the registration process is finished .
Deleting Dynamic Object Registration Profiles
To delete one or more dynamic object registration profiles, select the profiles and click Delete on the
ribbon. A pop-up window appears providing the following options from which you can choose a
resolution for the containers that are related to the selected profiles:
•
Delete the containers along with the profile. They will be removed from AvePoint
Online Services products.
•
Keep these containers registered in the system. They will continue to appear in your
AvePoint Online Services products. No new objects will be added.
Choose one of the options above and click Delete to confirm your deletion.
*Note: If you choose to keep the containers and you do not manually remove the objects from the
containers via Dynamic Object Registration > Manage Containers, once use the same Office 365
50
AvePoint Online Services
credentials to create a new registration profile, the scan result of these objects will be Need to Remove.
For the deleted containers and removed objects, DocAve Online handle them according to your
configurations in Control Panel > Dynamic Object Registration Settings.
Viewing Scan History
To view the scan history of a dynamic object registration profile, select the profile and click Scan History
on the ribbon. The View Scan History page appears.
On the View Scan History page, the basic profile information is displayed on the top. Select a scan job
from the drop-down list; the basic job information and detailed scan results are displayed. You can filter
the scan history by scan results.
You can click Export Scan History to export a report about the detailed scan results. You can also click
Delete Scan History to delete the selected scan job, including the basic job information and detailed
scan results.
Viewing Dynamic Object Registration Settings
To view detailed registration settings of a dynamic object registration profile, click View Registration
Settings under the Action column of a profile. The View Dynamic Object Registration Settings page
appears. The following information is displayed:
•
The basic profile settings, including profile name, profile description, authentication
method, service account profile name or app profile name, registration mode, and
update schedule.
•
The container details, including the containers for each object type and the objects that
have been added to the containers.
On the View Dynamic Object Registration Settings page, you can also click Edit to edit the profile or
click View Scan History to view the scan history of this profile.
*Note: If the following message is displayed, it indicates that some objects need to be removed:
Due to changes in this registration profile, some objects no longer meet the container’s criteria. View
and manage these objects?
Click the View and manage these objects link, and a pop-up window appears displaying the objects that
need to be removed. You can select one or more objects and click Remove on the ribbon. You can also
click Remove All to remove all of these objects from the corresponding containers.
Managing Rules
After rules are created in dynamic object registration profiles, you can manage these rules.
AvePoint Online Services
51
Click Mange Rules on the ribbon; the Manage Rules page appears. You can edit or delete rules.
•
Edit – To edit the settings of a rule, select the rule and click Edit on the ribbon.
*Note: The "Office 365 Group Team Site" and "Office 365 Group Mailbox" object types
have been integrated into "Office 365 Group". The rules of previously created custom
containers for Office 365 group team sites and Office 365 group mailboxes cannot be
edited.
•
Delete – To delete one or more rules, select the rules and click Delete on the ribbon. A
pop-up window appears asking for your confirmation. Click OK to confirm your deletion.
Managing Containers
After containers are created in dynamic object registration profiles, you can manage these containers
and the objects within the containers.
Click Mange Containers on the ribbon; the Manage Containers page appears. You can perform the
following actions:
•
Batch Import – To batch import objects into a container, complete the following steps:
i.
Click the title of an Office 365 object type to import objects into the containers
for this type of objects.
ii. Select the container where the objects will be imported.
iii. Click Batch Import on the ribbon, and a pop-up window appears. Then, refer to
the instructions in Importing Objects in Batch.
iv. Click Import to import the objects into the selected container in batch, or click
Cancel to close the pop-up window without importing any objects.
•
Delete Container – To delete one or more custom containers, select the containers and
click Delete on the ribbon. A pop-up window appears asking for your confirmation. Click
OK to confirm your deletion. When the containers are deleted, the objects within the
containers are removed from the groups.
•
Remove Objects – To remove one or more objects from their containers, expand the
container name, select the objects, and click Delete on the ribbon. A pop-up window
appears asking for your confirmation. Click OK to confirm your action.
•
Remove Objects Only – To only remove the objects from one or more containers, select
the containers and click Remove Objects Only on the ribbon. A pop-up window appears
asking for your confirmation. Click OK to confirm your action.
After you delete containers and remove objects in AvePoint Online Services, DocAve Online will handle
them according to your configurations in DocAve Online Control Panel > Dynamic Object Registration
Settings.
52
AvePoint Online Services
Importing Objects in Batch
In the pop-up window for importing objects in batch, configure the following settings:
1. Download an object list template by clicking the Download the Object List Template link, and
enter the information about the objects you are about to import in the downloaded Excel file.
2. Click Browse to upload the configured object list.
*Note: You can only upload one object list at a time. The previously uploaded object list will be
replaced by the newly uploaded one.
3. Provide an Office 365 account to connect to your Office 365 environment in the Office 365
Account Information field. Select one of the following methods:
*Note: The method determines the types of objects that can be imported. For more
information, refer to Appendix C: Objects Supported by Dynamic Object Registration.
•
Retrieve from a service account profile – Select this option to retrieve an Office 365
account information from a service account profile. Select a service account profile from
the drop-down list. If you have not created any service account profiles, you can select
the New Service Account Profile option from the drop-down list, and the Create Service
Account Profile page will appear in a new tab. For details of creating a service account
profile, refer to the Creating a Service Account Profile. After creating a new service
account profile, go back to the Manage Containers page, and click the refresh ( )
button next to the corresponding drop-down list to get the latest profile.
•
Retrieve from an app profile – Select this option to retrieve an Office 365 account
information from an app profile. Select an app profile from the drop-down list. If you
have not created any app profiles, you can select the New App Profile option from the
drop-down list, and the App Management page will appear in a new tab. For details of
creating an app profile, refer to the Creating App Profiles. After creating a new app
profile, go back to the Manage Containers page, and click the refresh ( ) button next
to the corresponding drop-down list to get the latest profile.
•
Specify an Office 365 account manually – Select this option to specify an Office 365
account manually.
i.
If the account you want to use has multi-factor authentication (MFA) enabled,
select the Our organization uses multi-factor authentication checkbox.
ii. Enter the username and password in the corresponding test boxes.
iii. Click Validation Test to validate the entered information.
iv. If you enable MFA, the Custom SharePoint Online Admin Center URL field
appears. Enter your SharePoint Online admin center URL in the text box.
*Note: If you want to import Office 365 groups or Exchange Online mailboxes, the
specified account must be an Office 365 Global Administrator or Exchange Onl ine
Administrator; if you want to import OneDrive for Business, the specified account must
AvePoint Online Services
53
be the administrator for all OneDrive for Business in the object list; if you want to
import SharePoint Online site collections, the specified account must be the
administrator of all site collections in the object list.
4. Click Import to import the objects into the selected container in batch, or click Cancel to close
the pop-up window without importing any objects.
54
AvePoint Online Services
Viewing License Information
On the Home page, the Tenant Owner and Service Administrators can view the license expiration date
of each available online product. The license expiration date is displayed below the product name.
If your product has the User Count Exceeded Purchased Limit label displayed on the Home page,
•
the number of your licenses in Office 365 has exceeded the licensed user seats for
AvePoint Online product for Office 365, and the number of exceeded Office 365 licenses
is larger than 10% of your purchased user seats.
or
•
the number of your active users in Salesforce has exceeded the licensed user seats for
DocAve Backup for Salesforce ®, and the number of exceeded Salesforce active users is
larger than 10% of your purchased user seats.
To ensure you can use the online products without any interruption, you must contact AvePoint Sales to
purchase more user seats.
*Note: AvePoint Online Services charges licenses of several Office 365 subscriptions. For more
information, refer to Appendix A: Office 365 Subscriptions Charged by AvePoint Online Services.
To view the detailed information of the license for each available online product, navigate to License >
License Information on the left pane.
On the License Information page, the license type, license status, and expiration date for each online
product are displayed. Click the product name to view more details about your license for this product,
including license type, the number of purchased user seats, license expiration date, license status, and
license agreement.
To obtain a full product license for any of the AvePoint Online Services products, contact AvePoint Sales.
AvePoint Online Services
55
Managing Promotional Codes
Promotional codes allow you to obtain free enterprise licenses of AvePoint online products. You can
contact AvePoint Technical Support to obtain promotional codes.
Note the following:
•
If the number of your Office 365 licenses has exceeded 100, you cannot apply any
promotional codes.
•
You can apply at most 10 promotional codes.
The Tenant Owner and Service Administrators can manage promotional codes by navigating to License >
Promotional Code Management. From this menu, you can perform the following actions:
•
Applying a Promotional Code
•
Searching for Existing Promotional Codes
Applying a Promotional Code
To apply a promotional code to obtain free enterprise licenses of AvePoint online products, enter the
promotional code in the text box on the upper-left corner, and click Apply next to the text box. You can
view details of each applied promotional code by clicking the View Details in the corresponding row.
Searching for Existing Promotional Codes
To search for specific promotional codes, enter keywords of the promotional code in the text box on the
upper-right corner, and click the search (
56
) button or press Enter.
AvePoint Online Services
Viewing Transaction History
If your tenant has obtained the full product license for DocAve Online through online payment, or your
tenant started a trial with a monthly or annually billed subscription on or after March 27 th 2016 and
before February 19th 2017, the Tenant Owner and Service Administrators can view your transaction
history by navigating to License > Transaction History on the left pane.
On the Transaction History page, the following information is displayed: order number, invoice number,
payment amount, product, registered account holder e-mail, date and time of payment. Click an order
number to view more details of the transaction.
AvePoint Online Services
57
Managing Subscriptions
If your tenant signed up to AvePoint Online Services on or after March 27th 2016 and before February
19th 2017, the Tenant Owner and Service Administrators can use Subscription Management.
Navigate to License > Subscription Management on the left pane. The Subscription Management page
provides Subscription Details and Payment Information. Click either of these tabs to access it.
•
The Subscription Details tab displays the following information of monthly or yearly
subscriptions: service, subscription, next payment amount, next payment date,
subscription start date, subscription end date, license status, and invoice number.
You can also perform the following actions on a monthly or yearly subscription:
•
o
Cancelling a Subscription
o
Viewing Invoices
The Payment Information tab allows you to perform the following actions:
o
Viewing and Editing Credit Card Information
o
Viewing and Editing Billing Address
*Note: If you want to edit your mailing address, click the current login ID in the upperright corner, select My Profile, and then edit the address in the contact information.
Cancelling a Subscription
To cancel a subscribed subscription, complete the following steps:
1. In the Subscription Details tab, locate to the subscription you are about to cancel.
2. In the Action column, click Cancel.
3. In the pop-up window, choose a reason for your cancellation or choose Others and enter your
reason in the text box.
4. Enter Additional comments or suggestions in the text box.
5. Choose one of the following options:
•
Click Keep My Subscription to close the window without cancelling your subscription.
•
Click Cancel My Subscription to confirm your cancellation.
*Note: If the Governance Automation Online (Includes DocAve Online and AvePoint Cloud Insights)
service was chosen for your tenant when signing up to AvePoint Online Services, three subscriptions are
generated in Subscription Details. One subscription is for DocAve Online, one subscription is for
AvePoint Cloud Insights, and another one is for Governance Automation Online. If you cancel the
subscription for Governance Automation Online here, the subscriptions for DocAve Online and AvePoint
Cloud Insights will remain.
58
AvePoint Online Services
*Note: If the DocAve Online (Includes AvePoint Cloud Insights) service was chosen for your tenant
when signing up to AvePoint Online Services, two subscriptions are generated in Subscription Details,
one subscription is for DocAve Online and the other is for AvePoint Cloud Insights. If you cancel the
subscription for DocAve Online here, the subscriptions for AvePoint Cloud Insights will remain.
Viewing Invoices
To view the invoice of a subscription, click the invoice number of the subscription in the Subscription
Details tab. A pop-up window appears and displays the detailed information of the invoice.
Viewing and Editing Credit Card Information
To view and edit your credit card information, complete the following steps:
1. In the Payment Information tab, go to the Credit Card field.
2. Click the here link.
3. The credit card information you previously provided is displayed, and you can modify it.
4. Click Submit.
Viewing and Editing Billing Address
To view and edit your billing address, complete the following steps:
1. In the Payment Information tab, go to the Billing Address field. The current billing address is
displayed.
2. To edit your billing address, click the here link in the Credit Card field. The billing address
information you previously provided is displayed, and you can modify it.
3. Click Submit.
AvePoint Online Services
59
Enabling Report Data Collection
To view reports provided by AvePoint Cloud Insights, Tenant Owners or Service Administrators must first
enable the report data collection.
Complete the following steps to enable the report data collection:
1. Click Report Data Collection on the left pane.
2. On the Report Data Collection page, select the Enable data collection checkbox.
*Note: Only the Office 365 data which is created after the report data collection is enabled can
be retrieved and included in AvePoint Cloud Insights reports.
3. Select the data source of report:
•
Office 365 API
o
SharePoint Online – Select this if you want to view the Content Reports and
User Reports in AvePoint Cloud Insights.
o
Exchange Online – This data source will be used in the later release.
o
Azure AD – This data source will be used in the later release.
•
Storage – Select this if you want to view the Storage Reports in AvePoint Cloud Insights.
•
Page Views – Select this if you want to view the Site Analysis in AvePoint Cloud Insights.
4. You can set Account Filter, which will exclude specific accounts from AvePoint Cloud Insights
report collectors. This can be useful for filtering out service accounts to improve the quality and
accuracy of reports. Enter one or more accounts in the following format:
[email protected].
5. Filter out DocAve Online system operator activity – AvePoint recommends you select this
option to filter out actions of DocAve Online system operators who register objects into DocAve
Online, since the action records caused by DocAve Online jobs may affect the collected data and
the analysis results.
6. Tenant Scope – Set the scope for the tenants whose data will be displayed on reports. Select All
tenants or Specific tenants. If you select Specific tenants, select at least one tenant from the
drop-down list.
7. Storage Configuration – Configure the storage for storing Cloud Insights data.
•
Select a storage type:
o
Default storage – Select this if you want to continue to use the default Azure
storage provided by AvePoint.
o
Custom storage – Select this if you want to create a custom storage (only Azure
BLOB Storage is supported), and finish the configurations below.
▪
60
Account name – Enter an account name of Azure BLOB Storage.
AvePoint Online Services
▪
Account password – Enter the password of the account above.
▪
Container name – Enter a container name of the storage. If the
container is removed from the storage, AvePoint Online Services will
create a new container using the same name when collecting storage
for the next time.
*Note: If you want to use a custom storage, note the followings:
•
▪
Once the configuration is saved, old data in the default storage will be
cleared up and moved to the new custom storage, and you cannot
switch to the default storage anymore.
▪
If you want to change to another custom storage, manually move the
data from the old custom storage to the new one. AvePoint Online
Services does not have the permission to clear up Cloud Insights data
from the old custom storage.
Enable e-mail notification about failed connection (for Custom storage only) – Select
this if you want to send an e-mail notification to all active Service Administrators when
the custom storage connection fails. The e-mail notification will be sent at 00:00 UTC
every day if the connection continues to fail.
8. Click Save to save your selections, or click Cancel to go back to the homepage without saving
any selections.
AvePoint Online Services
61
Exporting the User Activity Report
The User Activity Report allows Tenant Owners and Service Administrators to view the ir tenant’s user
activities in AvePoint Online Services.
Complete the following steps to export the User Activity Report:
1. Click User Activity Report on the left pane.
2. Click the calendar (
) button and respectively select the Start Time and End Time.
3. Click Export and select a location to save the CSV report. The report contains the information
about user activities within the selected time range. The information includes the summary of
actions, the login ID of the users who performed the actions, and the operation time.
62
AvePoint Online Services
Viewing Notifications
Notifications are displayed to the Tenant Owner and Service Administrators. The notification center
centralizes notifications of AvePoint Online Services.
The notification center has the following types of notifications:
•
The routine maintenance announcement.
•
The app profile alert.
The app profile alert appears in the following situations:
o
No app profiles for Office 365 or Salesforce are configured in your tenant.
o
Your tenant has app profiles for Office 365 or Salesforce, but one or more app
profiles’ authorizations to the AvePoint Online Services Administration app have
expired.
This alert closes after the corresponding issue is resolved.
•
The user seat over limit alert.
The user seat over limit alert appears in the following circumstances:
o
Product for Office 365
▪
The number of your licenses in Office 365 exceeds the number of your
purchased user seats for DocAve Online, Governance Automation
Online, Compliance Guardian Online, or File Share Navigator Online.
▪
The number of exceeded Office 365 licenses is larger than 10% of your
purchased user seats.
*Note: AvePoint Online Services charges licensed users of several Office 365
subscriptions. For more information, refer to Appendix A: Office 365
Subscriptions Charged by AvePoint Online Services.
o
Product for Salesforce
▪
The number of your active users in Salesforce exceeds the number of
your purchased user seats for DocAve Backup for Salesforce ®.
▪
The number of exceeded Salesforce active users is larger than 10% of
your purchased user seats.
*Note: The number of active Sandbox users in Salesforce will not be
counted.
This alert closes after you purchased enough user seats.
AvePoint Online Services
63
Apart from the app profile alert and the user seat over limit alert, each routine maintenance
announcement has a duration. The announcement whose duration has not been reached and the
unresolved app profile alert or user seat over limit alert are ongoing notifications. Each time you sign
into AvePoint Online Services, the NOTIFICATION CENTER window appears on the upper-right corner
with the ongoing notification displayed.
*Note: If you do not purchase user seats after the user seats have exceeded the limit for 30 days, the
user seat over limit alert appears each time you refresh the current page or go to another page within
AvePoint Online Services.
In the NOTIFICATION CENTER window, click View More Details to go to the Notification Center page.
You can also click the notification center ( ) button on the upper-right corner and click View More
Details to go to the Notification Center page.
The Notification Center page displays ongoing notifications and announcement history. You can click
Hide History to hide the announcement history. Show History allows you to display the hidden
announcement history.
64
AvePoint Online Services
Submitting Feedback
AvePoint provides a platform to collect feedback where you can provide suggestions for product
features from your AvePoint Online Services experience. Refer to the following steps to submit
feedback:
1. Click the submit feedback (
) button on the upper-right corner.
2. On the Submit Feedback page, configure the following settings:
a. Rate Your AvePoint Online Services Experience – Click the stars to evaluate your
AvePoint Online Services experience
b. Your Suggestion – Enter your suggestions about AvePoint Online Services features.
3. Click Submit to submit your feedback, or click Cancel to return to the AvePoint Online Services
homepage without submitting your feedback.
AvePoint Online Services
65
Managing Your Profile Information
To view and change your account information and reset your AvePoint Online Services password , click
the current login ID in the top-right corner, and then select My Profile from the drop-down list.
*Note: My Profile is only available to Local Authentication users and Office 365/Salesforce Service
Administrators.
In My Profile, you can edit the following information:
•
Contact Information – This tab displays the user ID and the contact information of the
current user. Edit the information in any of the available fields. Click Save to save your
changes, or click Cancel.
•
Reset Password – This tab allows you to reset a new password for your AvePoint Online
Services account when you’re logged in. Enter the Old Password, New Password, and
Confirm Password in the corresponding text boxes. Click Save to save your changes, or
click Cancel.
*Note: The Reset Password tab is only available to Local Authentication users.
After you reset your password, a password change confirmation e -mail will be sent to
your e-mail inbox to confirm the change.
66
AvePoint Online Services
Configuring Login IP Address Restriction for AvePoint
Online Services
AvePoint Online Services allows you to set login IP address restriction via integration with Microsoft
Office 365 and Azure. The login IP address restriction only allows users to log into AvePoint Online
Services from certain IP address range.
*Note: The login IP address restriction only takes effect on users who log into AvePoint Online Services
with Office 365 accounts.
Configuring Access Rules in Azure
When a user logs into AvePoint Online Services with an Office 365 account for the first time, the
AvePoint Online Services app is generated in My apps on Office 365. The user can click this app to
access AvePoint Online Services within Office 365. The login IP address restriction for AvePoint Online
Services can be enabled via configuring access rules for the AvePoint Online Services app.
Before configuring access rules, make sure the following prerequisites are in place.
•
License for Azure Active Directory Premium
•
Federated or managed Azure Directory tenant
•
Federated tenants require that multi-factor authentication (MFA) be enabled
Then, complete the following steps to configure access rules for the AvePoint Online Services app:
1. Sign into the Azure classic portal with a Global Administrator account for Azure AD.
2. Select the ACTIVE DIRECTORY on the left pane.
3. Select your directory on the DIRECTORY tab.
4. Click the APPLICATIONS tab, and select the AvePoint Online Services app that the rule will be
set for.
5. Click the CONFIGURE tab.
6. Navigate to the multi-factor authentication and location based access rules section, and select
ON option in the ENABLE ACCESS RULES field. With this option selected, the APPLY TO and
RULES fields appear.
7. In the APPLY TO field, define the scope of the access rule by selecting one of the following
options:
•
ALL USERS – With this option selected, the access rule will be applied to all users who
can access AvePoint Online Services.
AvePoint Online Services
67
•
GROUPS – With this option selected, the access rule will only be applied to the users in
specified security groups. Click Add Group and select groups in the Add Group pop-up
window.
•
Except – With this option selected, the access rule will not be applied to the users in
specified security groups. Click Add Group and select groups in the Add Group pop-up
window.
*Note: The groups that had been added under the GROUPS option cannot be selected
to be exempt from the rules.
8. In the RULES field, select the Block access when not at work option. With this option selected,
the users that are not coming from a trusted IP address will be blocked. The trusted IP address
ranges can be configured on the multi-factor authentication service settings page. Click the
Click here to define/edit your work network location link to go to the multi-factor
authentication service settings page.
On the multi-factor authentication service settings page, complete the following steps:
a. Navigate to the trusted ips field.
b. Enter the IP address ranges in the text box provided using CIDR notation. For example:
xxx.xxx.xxx.0/24 for IP addresses in the range xxx.xxx.xxx.1 – xxx.xxx.xxx.254, or
xxx.xxx.xxx.xxx/32 for a single IP address. You can enter up to 50 IP address ranges.
c. Click save to save your configurations.
9. In the Azure interface, click SAVE on the bottom to save your configuration or click DISCARD to
reset your configuration.
For additional information about Azure AD conditional access, refer to the instructions provided here:
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-azureadconnected-apps.
68
AvePoint Online Services
Appendix A: Office 365 Subscriptions Charged by
AvePoint Online Services
Services for Office 365 charge licenses of the following Office 365 subscriptions:
Category
Office 365 for Business
Office 365 for Education
Office 365 for
Government
Others
AvePoint Online Services
Subscription
Office 365 Small Business Premium
Office 365 Midsize Business
Office 365 Enterprise E3
Office 365 Enterprise E4
Office 365 Enterprise E5
Office 365 Enterprise K1 with Yammer
Office 365 Enterprise K1 without Yammer
Office 365 Enterprise K2
Microsoft Office 365 (Plan A1) for Students
Microsoft Office 365 (Plan A1) for Faculty
Office 365 Education E1 for Faculty
Microsoft Office 365 (Plan A2) for Students
Exchange Online (Plan 1) for Students
Office 365 (Plan A3) for Students
Office 365 (Plan A4) for Students
Office 365 (Plan A3) for Faculty
Office 365 (Plan A4) for Faculty
Microsoft Office 365 (Plan G1) for Government
Microsoft Office 365 (Plan G2) for Government
Microsoft Office 365 (Plan G3) for Government
Microsoft Office 365 (Plan G4) for Government
Microsoft Office 365 (Plan K1) for Government
Microsoft Office 365 (Plan K2) for Government
Microsoft Office 365 Exchange Online (Plan 2) only for Government
SharePoint Online Kiosk
Exchange Kiosk
SharePoint Plan 2G
Exchange Plan 2G
Office 365 (Plan P1)
Microsoft Office 365 E1
Microsoft Office 365 (Plan E2)
Office 365 (Plan K1)
Office 365 Business Premium
OneDrive for Business with Office Online
Office 365 ProPlus(Contain OneDrive for Business (Plan 1))
SMB_BUSINESS_PREMIUM
EXCHANGESTANDARD
ENTERPRISEPACKWITHOUTPROPLUS
SHAREPOINTENTERPRISE
69
Category
Subscription
EXCHANGEENTERPRISE
MCOSTANDARD
OFFICESUBSCRIPTION_STUDENT
OFFICESUBSCRIPTION_FACULTY
DEVELOPERPACK
O365_BUSINESS_ESSENTIALS
ENTERPRISEWITHSCAL
O365_BUSINESS
EXCHANGEENTERPRISE_FACULTY
SHAREPOINTSTANDAR_YAMMER
OneDrive for Business (Plan 2) Trial
Exchange Online Protection (Trial)
AvePoint Online Services will keep the charge list updated once Office 365 has any changes on
subscriptions for SharePoint Online, Exchange Online, and OneDrive for Business.
*Note: AvePoint Online Services does not charge the subscriptions that provide more than 500,000
users.
70
AvePoint Online Services
Appendix B: Supported Criteria in Dynamic Object
Registration Rules
The table below lists the criteria that are supported in Dynamic Object Registration advanced mode
rules.
Exchange Online Mailbox
Criteria
Condition
Mailbox Type
Equals
(User, Resource, In-Place Archived, Shared, Public Does Not Equal
Folder)
Department
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
City
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
State or Province
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
ZIP/Postal Code
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Country or Region
Equals
Does Not Equal
Office
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
AvePoint Online Services
71
Criteria
Condition
User ID
Display Name
Company
Office 365 Subscription Name
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
OneDrive for Business
Site Collection Property
Criteria
URL
Size
Created Time
Primary Administrator
Custom Property: Text
72
Condition
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
>=
<=
Before
After
On
Within
Older Than
Contains
Equals
Contains
Does Not Contain
Equals
Does Not Equal
AvePoint Online Services
Criteria
Custom Property: Number
Custom Property: Yes/No
Custom Property: Date and Time
Basic User Information
City
Country or Region
Company
Office
Department
Office 365 Subscription Name
AvePoint Online Services
Condition
Matches
Does Not Match
>=
<=
=
Equals
Does Not Equal
Before
After
On
Within
Older Than
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
73
Criteria
User Profile Property
Boolean
Date
Date Time
E-mail
Person
String (Single Value)
URL
Condition
Does Not Equal
Equals
Does Not Equal
Before
After
On
Within
Older Than
Before
After
On
Within
Older Than
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
SharePoint Online Site Collection
Criteria
URL
74
Condition
Contains
Does Not Contain
Equals
Does Not Equal
AvePoint Online Services
Criteria
Title
Size
Created Time
Primary Administrator
Template Name
Template ID
Custom Property: Text
Custom Property: Number
Custom Property: Yes/No
Custom Property: Date and Time
AvePoint Online Services
Condition
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
>=
<=
Before
After
On
Within
Older Than
Contains
Equals
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Equals
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
>=
<=
=
Equals
Does Not Equal
Before
After
On
Within
Older Than
75
Office 365 Group Team Site
Criteria
URL
Title
Created Time
Custom Property: Text
Custom Property: Number
Custom Property: Yes/No
Custom Property: Date and Time
Group Classification
76
Condition
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Before
After
On
Within
Older Than
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
>=
<=
=
Equals
Does Not Equal
Before
After
On
Within
Older Than
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
AvePoint Online Services
Office 365 Group Mailbox
Criteria
Display Name
Condition
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Equals
Does Not Equal
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Group ID
Privacy
Group Owner Name
Group Classification
Office 365 Group
*Note: The Office 365 Group Mailbox and Office 365 Group Team Site object types are integrated into
the Office 365 Group. The criteria of the Group Property is the same as that of the Office 365 Group
Mailbox, and the criteria of the Group Team Site Property is the same as that of the Office 365 Group
Team Site.
Group Property
Criteria
Display Name
Group Classification
AvePoint Online Services
Condition
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
77
Criteria
Group ID
Group Owner Name
Privacy
Group Team Site Property
Created Time
Custom Property: Date and Time
Custom Property: Number
Custom Property: Text
Custom Property: Yes/No
Group Classification
78
Condition
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Equals
Does Not Equal
Before
After
On
Within
Older Than
Before
After
On
Within
Older Than
>=
<=
=
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Equals
Does Not Equal
Contains
Does Not Contain
Equals
Does Not Equal
Matches
AvePoint Online Services
Criteria
Title
URL
Size
AvePoint Online Services
Condition
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
Contains
Does Not Contain
Equals
Does Not Equal
Matches
Does Not Match
>=
<=
79
Appendix C: Objects Supported by Dynamic Object
Registration
The table below lists the objects that can be registered by dynamic object registration profiles with
different authentication methods and app permissions.
Authentication
Method
Office 365 Service
Account Profile
Supported
Permissions of
Registration
App Profile
Mode
Express Mode N/A
Advanced
Mode
App Profile (for
Office 365)
N/A
Express Mode All Permissions
SharePoint
Online
Permissions
Exchange
Online
Permissions
Office 365 Service
Account Profile
(with MFA
Enabled) + App
Profile (for Office
365)
Express Mode All Permissions
SharePoint
Online
Permissions
80
Objects That Can be
Registered
Note
SharePoint Online Site
Collection
Exchange Online
Mailbox
OneDrive for Business
Office 365 Group
SharePoint Online Site
Collection
Exchange Online
Mailbox
OneDrive for Business
Office 365 Group
Exchange Online
Mailbox
Office 365 Group (Group
Mailbox Only)
N/A
The app profile
with SharePoint
Online
permissions is not
available here.
Exchange Online
Mailbox
Office 365 Group (Group
Mailbox Only)
SharePoint Online Site
Collection
Exchange Online
Mailbox
OneDrive for Business
Office 365 Group
SharePoint Online Site
Collection
OneDrive for Business
AvePoint Online Services
Authentication
Method
Supported
Registration
Mode
Permissions of
App Profile
Objects That Can be
Registered
Note
Exchange
Online
Permissions
N/A
When the
selected Office
365 service
account profile
has MFA enabled,
the app profile
with Exchange
Online
permissions is not
available here.
The table below lists the objects that can be and cannot be registered via Batch Import.
Retrieve Credentials from
Office 365
Service
Account
Profile
Without
MFA
Enabled
Global
Administrator
SharePoint
Online
Administrator
Exchange
Online
Administrator
With
Global
MFA
Administrator
Enabled
SharePoint
Online
Administrator
Exchange
Online
Administrator
App
All Permissions
Profile (for SharePoint Online
Office 365) Permissions
Exchange Online
Permissions
Manually Specified Office 365 Account
AvePoint Online Services
SharePoint
Online Site
Collection
Supported
Exchange
Online
Mailbox
Supported
OneDrive for Office 365
Business
Group
Supported
Supported
Supported
Supported
Supported
Unsupported
Unsupported Supported
Supported
Supported
Supported
Unsupported Unsupported Unsupported
Supported
Unsupported Unsupported Unsupported
Unsupported Unsupported Unsupported Unsupported
Unsupported Supported
Unsupported Supported
Unsupported Supported
Unsupported Supported
Unsupported Supported
Unsupported Supported
Supported
Supported
Supported
Supported
81
Notices and Copyright Information
Notice
The materials contained in this publication are owned or provided by AvePoint, Inc. and are the property
of AvePoint or its licensors, and are protected by copyright, trademark and other intellectual property
laws. No trademark or copyright notice in this publication may be removed or al tered in any way.
Copyright
Copyright © 2014-2017 AvePoint, Inc. All rights reserved. All materials contained in this publication are
protected by United States and international copyright laws and no part of this publication may be
reproduced, modified, displayed, stored in a retrieval system, or transmitted in any form or by any
means, electronic, mechanical, photocopying, recording or otherwise, without the prior written consent
of AvePoint, 3 Second Street, Jersey City, NJ 07311, USA or, in the case of materials in this publication
owned by third parties, without such third party’s consent. Notwithstanding the foregoing, to the extent
any AvePoint material in this publication is reproduced or modified in any way (including derivative
works and transformative works), by you or on your behalf, then such reproduced or modified materials
shall be automatically assigned to AvePoint without any further act and you agree on behalf of yourself
and your successors, assigns, heirs, beneficiaries, and executors, to promptly do all things and sign all
documents to confirm the transfer of such reproduced or modified materials to AvePoint.
Trademarks
AvePoint®, DocAve®, the AvePoint logo, and the AvePoint Pyramid logo are registered trademarks of
AvePoint, Inc. with the United States Patent and Trademark Office. These registered trademarks, along
with all other trademarks of AvePoint used in this publication are the exclusive property of AvePoint and
may not be used without prior written consent.
Microsoft, MS-DOS, Internet Explorer, Office, Office 365, SharePoint, Windows PowerShell, SQL Server,
Outlook, Windows Server, Active Directory, and Dynamics CRM 2013 are either registered trademarks or
trademarks of Microsoft Corporation in the United States and/or other countries.
Adobe Acrobat and Acrobat Reader are trademarks of Adobe Systems, Inc.
All other trademarks contained in this publication are the property of their respective owners and may
not be used without such party’s consent.
Changes
The material in this publication is for information purposes only and is subject to change without notice.
While reasonable efforts have been made in the preparation of this publication to ensure its accuracy,
AvePoint makes no representation or warranty, expressed or implied, as to its completeness, accuracy,
or suitability, and assumes no liability resulting from errors or omissions in this publication or from the
use of the information contained herein. AvePoint reserves the right to make changes in the Graphical
User Interface of the AvePoint software without reservation and without notification to its users.
AvePoint, Inc.
Harborside Financial Center, Plaza 10
3 Second Street, 9th Floor
Jersey City, New Jersey 07311
USA
82
AvePoint Online Services
">