Assign users roles and permissions for a company's users needing to work in Partner Center

Appropriate roles

  • Global admin
  • User management admin
  • MPN partner admin

You've set up your partner profile including legal name and address, support details, file tax exemptions, bank info, and the primary contact for your company. Next step: Get your users set up with passwords and roles so they can begin working in Partner Center with you.

Set up your employees to work in Partner Center

You determine the types of access your users have to Partner Center by the roles and permissions you give them. Roles are related to the program(s) your business is involved in. For example, if your business is a Cloud Solution Provider (CSP) business, you will not only have the standard Azure Active Directory tenant management roles such as global admin, but will need roles specific to the CSP program. Each program has roles specific to it.

Note

Azure Active Directory tenant roles include global admin, user admin, and CSP roles. Non-Azure-Active-Directory roles are those roles that do not manage the tenant, and they include MPN admin, business profile admin, referral admin, incentive admin, and incentive user.

Manage commercial transactions in Partner Center (Azure AD and CSP roles)

Role What they can do Learn more
Global admin * Can access all Microsoft account/services with full privileges Manage your Partner Center account
* Create support tickets for the Partner Center
* View partner support tickets you create
* View agreements, price lists, and offers
* View, create, and manage partner users
View, create, and manage billing, invoices, and recon files
User management admin * View, create, and manage users Manage your Microsoft Partner Network membership benefits and offers in Partner Center
* View all partner profiles
* Create support tickets for the Partner Center
* View partner support tickets you create
Billing admin - View, create, and manage billing, invoices, and recon files Read your bill
* View pricing
* Create support tickets for the Partner Center
* View partner support tickets you create
Default user View My profile Reset your password
Admin agent * Customer management Connect with your customers
* Add device list to the Partner Center
* Create and apply profiles to devices
* Subscription management
* Service health and service requests for customers
* Request delegated administrator privileges
* View pricing and offers
* Billing
* Administer on behalf of a customer
* Register a value added reseller
* Create support tickets for the Partner Center
* View partner support tickets you create
Sales agent * Customer management Provide billing support for your customers and help answer their billing questions
* Add device list to the Partner Center
* Subscription management
* View support tickets
* Request a relationship with a customer
* View pricing and offers
* Manage customer leads
* View the customer agreement
* Register a value-added reseller
* Create support tickets for the Partner Center
* View partner support tickets you create
Helpdesk agent * Search for and view a customer Escalate problems to Microsoft and learn which issues are more-suited to Microsoft escalation
* Edit customer details
* Help resolve customer issues with billing or subscription management
* Request support on behalf of customers
* Manage subscriptions and billing issues on behalf of customers
* Create support tickets for the Partner Center
* View partner support tickets you create

Control Panel Vendor (CPV). (CSP role and non-Azure AD role)

CPVs develop apps for use by Cloud Solution Provider (CSP) partners to enable them to integrate their systems with Partner Center APIs.

Role What you can do Learn more
Global admin View and manage your CPV profile Enroll as a Control Panel Vendor to help integrate CSP partner systems with Partner Center APIs
View and manage any of your users who need access to CPV capabilities

Guest user (must be added to the Azure Active Directory tenant)

Guest user Roles
MPN partner admin
Business profile admin
Referrals admin

Manage MPN membership and your company

These roles are not Azure Active Directory roles. These roles manage the company business rather than the tenant.

Role What you can do Learn more
MPN partner admin * View, create, and manage partner service requests Buy or renew a Microsoft Action Pack subscription or silver and gold competencies
* View legal, company, business, and MPN profiles
* View user details and their skills data
* View competencies
* View and manage benefits
* View and purchase MPN offers
* View MPN offers order history and invoices
* View partner contribution indicator data
* Can work in the Voucher Validation tool
* View customer data analytics
* View other user roles within company, but can't assign roles
* Create support tickets for the Partner Center
* View partner support tickets you create
Account admin Add locations Manage locations
Manage profiles related to the accounts you are admin for
* Assign roles for users in tenant to non-Azure-Active-Directory roles
* Enroll locations into programs
* Create support tickets for the Partner Center
* View partner support tickets you create

Manage referrals

Role What you can do Learn more
Referrals admin Create and manage everything under Referrals tab in Partner Center Manage Co-sell opportunities
Can view and edit all the co-sell opportunities and leads
Can assign team members for a deal
Can view and edit business profiles
Can view and register deals for opportunities that are marked as won and eligible for deal registration
Can create and view support tickets
Referrals user Create and manage co-sell opportunities only if they are a part of the team Manage Co-sell opportunities
Can create co-sell opportunities for the locations where they are assigned the role.
Can view and register deals for opportunities that are marked as won and eligible for deal registration if they are team member.
Can create and view support tickets
Business profile admin Create and manage business profiles Manage business profiles
Can create and view support tickets

Along with the new referrals user role, we are also introducing the location scope for deals. The table below explains the deals-access based on the location.

Scope What you can do
Entire company Both admins and users have access to create deals for any location in their company
Referral admin has access to view and edit all the deals
Referral users have access to view and edit all the deals only if they are a part of the team
One or more locations Both admins and users have access to create deals for the assigned location in their company
Referral admin has access to view and edit all the deals belonging to the assigned locations
Referral users have access to view and edit all the deals belonging to the assigned locations if they are part of the team

Manage incentives

Role What you can do Learn more
Incentives admin * Initiates and manages incentives Use these resources to help you get started with incentives
* Can view and edit all aspects of incentives programs
* Can view and edit bank and tax details
* View rebate and co-op earnings
* Access support
* Dispute incentives payments
Incentives user * Can view incentives programs
* Can view and initiate incentives claims
* View rebate and co-op earnings
* Create support tickets for the Partner Center
* View partner support tickets you create

View Partner Center Insights data

Role What you can do Learn more
Executive report viewer Access to all reporting datasets, create partner support tickets, view partner support tickets you create Overview dashboard reports available in Partner Center Insights
Report viewer Access to data reports with exception of revenue and customer and employee personal data, create partner support tickets, view partner support tickets you create

Next steps