Assign roles, permissions, and workspace access to users

Appropriate roles: Account admin | Global admin | User management admin

You determine the access your users have to Partner Center by the roles you assign to them. Each program has roles specific to the business it relates to. For example, if your business is a Cloud Solution Provider (CSP) business, your users need roles specific to the CSP program, not just standard Microsoft Azure Active Directory (Azure AD) tenant management roles such as global admin.

Azure AD tenant roles and non-Azure AD roles

  • Azure AD tenant roles include global admin, user admin, and CSP roles.
  • Non-Azure-AD roles are roles that don't manage the tenant. They include business profile admin, referral admin, incentive admin, incentive user, and MPN (Microsoft Partner Network) partner admin.

User roles, permissions, and workspace access

Nine tables in this article list Partner Center user roles, the permissions granted by those roles, and the workspaces those roles have access to.

The tables are:

This article doesn't describe all roles, such as roles in the Microsoft marketplace and roles with privileges for various GDAP capabilities.

Note

The Owner role is assigned to the user who enrolled in the program and can't be modified. If you need to change the Owner, create a support ticket.

Manage CSP commercial transactions in Partner Center (Azure AD and CSP roles)

This table lists the Azure AD and CSP roles you can assign to users. It also shows the workspaces and other access granted with those user roles.

Workspace Level of access User Role Learn more
Customers Customer management Admin agent Connect with your customers
Customers View all partner profiles User management admin
Customers Request a relationship with a customer Sales agent *
Customers View the customer agreement Sales agent *
Pricing View agreements, price lists, and offers Global admin
Pricing View pricing and offers Admin agent
Pricing View pricing and offers Sales agent *
Account settings Can access all Microsoft account/services with full privileges Global admin Manage your Partner Center account
Account settings View, create, and manage all partner users Global admin Create user accounts and assign roles.
Only a Global admin can reset a password for a global admin.
Account settings Add device list to the Partner Center Admin agent
Account settings Create and apply profiles to devices Admin agent
Account settings Subscription management Admin agent
Account settings Request delegated administrator privileges Admin agent
Account settings Administer on behalf of a customer Admin agent
Account settings Register a value-added reseller Admin agent
Account settings Add device list to the Partner Center Sales agent *
Account settings Subscription management Sales agent *
Account settings Enroll a value-added reseller Sales agent *
Account settings View my profile Default user Link or unlink a Microsoft Certification profile ID (MCID) to a Microsoft Partner Network (MPN) account

Reset your password
Billing View, create, and manage billing, invoices, and recon files Global admin
Billing Billing Admin agent
Billing View, create, and manage billing, invoices, and recon files Billing admin Read your bill
Billing View pricing Billing admin
Billing Manage subscriptions and billing issues on behalf of customers Helpdesk agent
Billing Customer management Sales agent * Provide billing support for your customers and help answer their billing questions
Referrals Manage customer leads Sales agent *

Note

* The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.

Return to top

Manage MPN membership and your company

This table lists the roles you can assign to users so they can view and manage memberships, competencies, programs, and benefits in Microsoft Partner Network (MPN). It also shows the workspace access granted with those user roles.

Workspace Level of access User Role Learn more
Membership View, create, and manage partner service requests MPN partner admin
Membership View user details and their skills data MPN partner admin Skills report in Partner Center
Membership View competencies MPN partner admin Differentiate your business by attaining Microsoft competencies
Membership View and purchase MPN offers MPN partner admin Buy or renew a Microsoft Action Pack subscription or silver and gold competencies
Membership View MPN offers order history and invoices MPN partner admin
Membership View partner contribution indicator data MPN partner admin
Membership Can work in the Voucher Validation tool MPN partner admin
Benefits View and manage benefits MPN partner admin
Benefits View, create, and manage users User management admin Manage your Microsoft Partner Network membership benefits and offers in Partner Center
Account settings Add locations Account admin Manage locations
Account settings Manage profiles related to the accounts you're the admin for Account admin
Account settings Assign roles for users in tenant to non-Azure-AD roles Account admin
Account settings View legal, company, business, and MPN profiles MPN partner admin Verify your company profile
Account settings View other user roles within company, but can't assign roles MPN partner admin
Account settings Enroll locations into programs Account admin
Insights View customer data analytics MPN partner admin

Return to top

Manage referrals

This table lists roles you can assign to users so they can create, manage, edit, assign, register, or view in the Referrals workspace. (See Scope of referral roles in the next table for the scope of deals that Referrals users can make.)

Workspace Level of access User Role Learn more
Referrals Create and manage everything under Referrals tab in Partner Center Referrals admin Manage Co-sell opportunities
Referrals Can view and edit all the co-sell opportunities and leads Referrals admin
Referrals Can assign team members for a deal Referrals admin
Referrals Can view and edit business profiles Referrals admin
Referrals Can view and register deals for opportunities that are marked as won and eligible for deal registration Referrals admin
Referrals Create and manage co-sell opportunities only if they're a part of the team Referrals user Manage Co-sell opportunities
Referrals Can create co-sell opportunities for the locations where they're assigned the role. Referrals user
Referrals Can view and register deals for opportunities that are marked as won and eligible for deal registration if they're team member. Referrals user
Referrals Create and manage business profiles Business profile admin Manage business profiles

Return to top

Scope of referral roles

This table shows the scope of deals that users with Referrals privileges can make.

Workspace Scope What you can do
Referrals Entire company Both admins and users have access to create deals for any location in their company.
Referrals Referral admin has access to view and edit all the deals.
Referrals Referral users have access to view and edit all the deals only if they're a part of the team.
Referrals One or more locations Both admins and users have access to create deals for the assigned location in their company.
Referrals Referral admin has access to view and edit all the deals belonging to the assigned locations.
Referrals Referrals users have access to view and edit all the deals belonging to the assigned locations if they're part of the team.

Return to top

Manage incentives

This table lists roles you can assign to users so they can initiate, manage, edit, dispute, or view in the Incentives workspace.

Workspace Level of access User Role Learn more
Incentives Initiates and manages incentives Incentives admin Use these resources to help you get started with incentives
Incentives Can view and edit all aspects of incentives programs Incentives admin
Incentives Can view and edit bank and tax details Incentives admin
Incentives View rebate and co-op earnings Incentives admin
Incentives Dispute incentives payments Incentives admin
Incentives Can view incentives programs Incentives user
Incentives Can view and initiate incentives claims Incentives user
Incentives View rebate and co-op earnings Incentives user

Return to top

View Partner Center Insights data

This table lists roles you can assign to users so they can access, view, and create data about your customers and their purchases in the Insights workspace.

Workspace Level of access User Role Learn more
Insights View customer data analytics MPN partner admin
Insights Access to all reporting datasets, create partner support tickets, view partner support tickets you create Executive report viewer Overview dashboard reports available in Partner Center Insights
Insights Access to data reports with exception of revenue and customer and employee personal data, create partner support tickets, view partner support tickets you create Report viewer

Return to top

Control Panel Vendor

This table shows the roles with access to Control Panel Vendor (CPV) capabilities.

A Control Panel Vendor (CPV) is an independent software vendor that develops applications for use by CSP) partners to enable them to integrate their systems with Partner Center APIs. A Control Panel vendor isn't a CSP Partner with direct access to the Partner Center dashboard or Partner Center APIs.

Workspace Level of access User Role Learn more
Account settings View and manage your CPV profile Global admin Enroll as a Control Panel Vendor to help integrate CSP partner systems with Partner Center APIs
Account settings View and manage any of your users who need access to CPV capabilities  Global admin

Return to top

Guest user

A user can be added as a guest on the Azure AD tenant. Their access to Partner Center capabilities depends on the role they're assigned by the admin on the Azure AD tenant.

Guest user User Roles
MPN partner admin
Business profile admin
Referrals admin

Note

To access, view, or manage an MPN account, a guest user must have the Global admin or MPN partner admin role. (Otherwise, they will see the message, "Access denied. Please contact your company’s global admin and ask them to grant you the appropriate access permissions.")

Return to top

Help + support

This table lists roles you can assign to users, and the level of help and support that they can create, view, access, or provide.

Workspace Level of access User Role Learn more
Help + support Create support tickets for Partner Center.
View partner support tickets that you create.
Global admin, Account admin, Helpdesk agent, MPN partner admin, Incentives user, Admin agent, User management admin, Billing admin, Referrals admin, Referrals user, Business profile admin, Sales agent (The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.)
Help + support View support tickets Sales agent (The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.)
Help + support Access support Incentives admin
Help + support Service health and service requests for customers Admin agent
Help + support Search for and view a customer Helpdesk agent Escalate problems to Microsoft and learn which issues are more-suited to Microsoft escalation
Help + support Edit customer details Helpdesk agent
Help + support Help resolve customer issues with billing or subscription management Helpdesk agent
Help + support Request support on behalf of customers Helpdesk agent

Return to top

Next steps

Read the following articles for more information about roles and permissions.