Set roles or custom permissions for account users

When you add users to your Partner Center account, you'll need to specify what access they have within the account. You can do this by assigning them standard roles which applies to the entire account, or you can customize their permissions to provide the appropriate level of access. Some of the custom permissions apply to the entire account, and some can be limited to one or more specific products (or granted to all products, if you prefer).

Note

The same roles and permissions can be applied regardless of whether you are adding a user, a group, or an Azure AD application.

When determining what role or permissions to apply, keep in mind:

  • Users (including groups and Azure AD applications) will be able to access the entire Partner Center account with the permissions associated with their assigned role(s), unless you customize permissions and assign product-level permissions so that they can only work with specific apps and/or add-ons.
  • You can allow a user, group, or Azure AD application to have access to more than one role's functionality by selecting multiple roles, or by using custom permissions to grant the access you'd like.
  • A user with a certain role (or set of custom permissions) may also be part of a group that has a different role (or set of permissions). In that case, the user will have access to all of the functionality associated with both the group and the individual account.

Tip

This topic is specific to the Windows apps developer program in Partner Center. For info about user roles in the Hardware Developer Program, see Managing User Roles. For info about user roles in the Windows Desktop Application Program, see Windows Desktop Application Program.

Assign roles to account users

By default, a set of standard roles is presented for you to choose from when you add a user, group, or Azure AD application to your Partner Center account. Each role has a specific set of permissions in order to perform certain functions within the account.

Unless you opt to define custom permissions by selecting Customize permissions, each user, group, or Azure AD application that you add to an account must be assigned at least one of the following standard roles.

Note

The owner of the account is the person who first created it with a Microsoft account (and not any user(s) added through Azure AD). This account owner is the only person with complete access to the account, including the ability to delete apps, create and edit all account users, and change all financial and account settings.

Role Description
Manager Has complete access to the account, except for changing tax and payout settings. This includes managing users in Partner Center, but note that the ability to create and delete users in the Azure AD tenant is dependent on the account's permission in Azure AD. That is, if a user is assigned the Manager role, but does not have global administrator permissions in the organization's Azure AD, they will not be able to create new users or delete users from the directory (though they can change a user's Partner Center role).

Note that if the Partner Center account is associated with more than one Azure AD tenant, a Manager can’t see complete details for a user (including first name, last name, password recovery email, and whether they are an Azure AD global administrator) unless they are signed in to the same tenant as that user with an account that has global administrator permissions for that tenant. However, they can add and remove users in any tenant that is associated with the Partner Center account.

Developer Can upload packages and submit apps and add-ons, and can view the Usage report for telemetry details. Can access Cross-Device Experiences functionality. Can’t view financial info or account settings.
Business Contributor Can view Health and Usage reports. Can't create or submit products, change account settings, or view financial info.
Finance Contributor Can view payout reports, financial info, and acquisition reports. Can’t make any changes to apps, add-ons, or account settings.
Marketer Can respond to customer reviews and view non-financial analytic reports. Can’t make any changes to apps, add-ons, or account settings.

The table below shows some of the specific features available to each of these roles (and to the account owner).

Account owner Manager Developer Business Contributor Finance Contributor Marketer
Acquisition report Can view Can view No access No access Can view No access
Feedback report/responses Can view and send feedback Can view and send feedback Can view and send feedback No access No access Can view and send feedback
Health report Can view Can view Can view Can view No access No access
Usage report Can view Can view Can view Can view No access No access
Payout account Can update No access No access No access Can view No access
Tax profile Can update No access No access No access Can view No access
Payout summary Can view No access No access No access Can view No access

If none of the standard roles are appropriate, or you wish to limit access to specific apps and/or add-ons, you can grant custom permissions to the user by selecting Customize permissions, as described below.

Assign custom permissions to account users

To assign custom permissions rather than standard roles, click Customize permissions in the Roles section when adding or editing the user account.

To enable a permission for the user, toggle the box to the appropriate setting.

Guide to access settings

  • No access: The user will not have the indicated permission.
  • Read only: The user will have access to view features related to the indicated area, but will not be able to make changes.
  • Read/write: The user will have access to make changes associated with the area, as well as viewing it.
  • Mixed: You can’t select this option directly, but the Mixed indicator will show if you have allowed a combination of access for that permission. For example, if you grant Read only access to Pricing and availability for All products, but then grant Read/write access to Pricing and availability for one specific product, the Pricing and availability indicator for All products will show as Mixed. The same applies if some products have No access for a permission, but others have Read/write and/or Read only access.

For some permissions, such as those related to viewing analytic data, only Read only access can be granted. Note that in the current implementation, some permissions have no distinction between Read only and Read/write access. Review the details for each permission to understand the specific capabilities granted by Read only and/or Read/write access.

The specific details about each permission are described in the tables below.

Account-level permissions

The permissions in this section cannot be limited to specific products. Granting access to one of these permissions allows the user to have that permission for the entire account.

Permission name Read only Read/write
Account settings Can view all pages in the Account settings section, including contact info. Can view all pages in the Account settings section. Can make changes to contact info and other pages, but can’t make changes to the payout account or tax profile (unless that permission is granted separately).
Account users Can view users that have been added to the account in the Users section. Can add users to the account and make changes to existing users in the Users section.
Account-level ad performance report Can view the account-level Advertising performance report. N/A
Ad campaigns Can view ad campaigns created in the account. Can create, manage, and view ad campaigns created in the account.
Ad mediation Can view ad mediation configurations for all products in the account. Can view and change ad mediation configurations for all products in the account.
Ad mediation reports Can view the Ad mediation report for all products in the account. N/A
Ad performance reports Can view Advertising performance reports for all products in the account. N/A
Ad units Can view the ad units that have been created for the account. Can create, manage, and view ad units for the account.
Affiliate ads Can view affiliate ad usage in all products in the account. Can manage and view affiliate ad usage for all products in the account.
Affiliates performance reports Can view the Affiliates performance report for all products in the account. N/A
App install ads reports Can view the Ad campaign report. N/A
Community ads Can view free community ad usage for all products in the account. Can create, manage, and view free community ad usage for all products in the account.
Contact info Can view contact info in the Account settings section. Can edit and view contact info in the Account settings section.
COPPA compliance Can view COPPA compliance selections (indicating whether products are targeted at children under the age of 13) for all products in the account. Can edit and view COPPA compliance selections (indicating whether products are targeted at children under the age of 13) for all products in the account.
Customer groups Can view customer groups (segments and known user groups). Can create, edit, and view customer groups (segments and known user groups).
Manage product groups * Can view the new product group creation page, but can’t actually create new product groups. Can create and edit product groups.
New apps Can view the new app creation page, but can’t actually create new apps in the account. Can create new apps in the account by reserving new app names, and can create submissions and submit apps to the Store.
New bundles * Can view the new bundle creation page, but can’t actually create new bundles in the account. Can create new bundles of products.
Partner services * Can view certificates for installing to services to retrieve XTokens. Can manage and view certificates for installing to services to retrieve XTokens.
Payout account Can view payout account info in Account settings. Can edit and view payout account info in Account settings.
Payout summary Can view the Payout summary to access and download payout reporting info. Can view the Payout summary to access and download payout reporting info.
Relying parties * Can view relying parties to retrieve XTokens. Can manage and view relying parties to retrieve XTokens.
Request discs * Can view game disc requests. Can build and view game disc requests.
Sandboxes * Can access the Sandboxes page and view sandboxes in the account and any applicable configurations for those sandboxes. Can’t view the products and submissions for each sandbox unless the appropriate product-level permissions are granted. Can access the Sandboxes page and view and manage the sandboxes in the account, including creating and deleting sandboxes and managing their configurations. Can’t view the products and submissions for each sandbox unless the appropriate product-level permissions are granted.
Store sale events * N/A Can configure the option to automatically include products in Store sale events.
Tax profile Can view tax profile info and forms in Account settings. Can fill out tax forms and update tax profile info in Account settings.
Test accounts * Can view accounts for testing Xbox Live configuration. Can create, manage, and view accounts for testing Xbox Live configuration.
Xbox devices Can view the Xbox development consoles enabled for the account in the Account settings section. Can add, remove, and view the Xbox development consoles enabled for the account in the Account settings section.

* Permissions marked with an asterisk (*) grant access to features which are not available to all accounts. If your account has not been enabled for these features, your selections for these permissions will not have any effect.

Product-level permissions

The permissions in this section can be granted to all products in the account, or can be customized to allow the permission only for one or more specific products.

Product-level permissions are grouped into four categories: Analytics, Monetization, Publishing, and Xbox Live. You can expand each of these categories to view the individual permissions in each category. You also have the option to enable All permissions for one or more specific products.

To grant a permission for every product in the account, make your selections for that permission (by toggling the box to indicate Read only or Read/write) in the row marked All products.

Tip

Selections made for All products will apply to every product currently in the account, as well as any future products created in the account. To prevent permissions from applying to future products, select all of the products individually rather than choosing All products.

Below the All products row, you’ll see each product in the account listed on a separate row. To grant a permission for only a specific product, make your selections for that permission in the row for that product.

Each add-on is listed in a separate row underneath its parent product, along with an All add-ons row. Selections made for All add-ons will apply to all current add-ons for that product, as well as any future add-ons created for that product.

Note that some permissions cannot be set for add-ons. This is either because they don’t apply to add-ons (for example, the Customer feedback permission) or because the permission granted at the parent product level applies to all add-ons for that product (for example, Promotional codes). Note, however, that any permission that is available for add-ons must be set separately; add-ons do not inherit selections made for the parent product. For example, if you wish to allow a user to make pricing and availability selections for an add-on, you would need to enable the Pricing and availability permission for the add-on (or for All add-ons), whether or not you have granted the Pricing and availability permission for the parent product.

Analytics

Permission name Read only Read/write Read only (Add‑on) Read‑write (Add‑on)
Acquisitions Can view the Acquisitions and Add-on acquisitions reports for the product. N/A N/A (settings for parent product include the **Add-on acquisitions** report) N/A
Usage Can view the Usage report for the product. N/A N/A N/A
Health Can view the Health report for the product. N/A N/A N/A
Customer feedback Can view the Reviews and Feedback reports for the product. N/A (to respond to feedback or reviews, the Contact customer permission must be granted) N/A N/A
Xbox analytics Can view the Xbox analytics report for the product. N/A N/A N/A

Monetization

Permission name Read only Read/write Read only (Add‑on) Read‑write (Add‑on)
Promotional codes Can view promotional code orders and usage info for the product and its add-ons, and can view usage info. Can view, manage, and create promotional code orders for the product and its add-ons, and can view usage info. N/A (settings for parent product apply to all add-ons) N/A (settings for parent product apply to all add-ons)
Targeted offers Can view targeted offers for the product. Can view, manage and create targeted offers for the product. N/A N/A
Contact customer Can view responses to customer feedback and responses to customer reviews, as long as the Customer feedback permission has been granted as well. Can also view targeted notifications that have been created for the product. Can respond to customer feedback and respond to customer reviews, as long as the Customer feedback permission has been granted as well. Can also create and send targeted notifications for the product. N/A N/A
Experimentation Can view experiments (A/B testing) and view experimentation data for the product. Can create, manage, and view experiments (A/B testing) for the product, and view experimentation data. N/A N/A
Store sale events * Can view sale event status for the product. Can add the product to sale events and configure discounts. Can view sale event status for the product. Can add the product to sale events and configure discounts.

Publishing

Permission name Read only Read/write Read only (Add‑on) Read‑write (Add‑on)
Pricing and availability Can view the Pricing and availability page of product submissions. Can view and edit the Pricing and availability page of product submissions. Can view the Pricing and availability page of add-on submissions. Can view and edit the Pricing and availability page of add-on submissions.
Properties Can view the Properties page of product submissions. Can view and edit the Properties page of product submissions. Can view the Properties page of add-on submissions. Can view and edit the Properties page of add-on submissions.
Age ratings Can view the Age ratings page of product submissions. Can view and edit the Age ratings page of product submissions. Can view the Age ratings page of add-on submissions. Can view and edit the Age ratings page of add-on submissions.
Packages Can view the Packages page for product submissions. Can view and edit the Packages page for product submissions, including uploading packages. Can view device family targeting and packages (if applicable) for add-on submissions. Can view and edit device family targeting for add-on submissions, including uploading packages if applicable.
Store listings Can view the Store listing page(s) for product submissions. Can view and edit the Store listing page(s) for product submissions, and can add new Store listings for different languages. Can view the Store listing page(s) for add-on submissions. Can view and edit the Store listing page(s) for add-on submissions, and can add Store listings for different languages.
Store submission No access is granted if this permission is set to read-only. Can submit the product to the Store and view certification reports. Includes both new and updated submissions. No access is granted if this permission is set to read-only. Can submit the add-on to the Store and view certification reports. Includes both new and updated submissions.
New submission creation No access is granted if this permission is set to read-only. Can create new submissions for the product. No access is granted if this permission is set to read-only. Can create new submissions for the add-on.
New add-ons No access is granted if this permission is set to read-only. Can create new add-ons for the product. N/A N/A
Name reservations Can view the Manage app names page for the product. Can view and edit the Manage app names page for the product, including reserving additional names and deleting reserved names. Can view reserved names for the add-on. Can view and edit reserved names for the add-on.

Xbox Live *

Permission name Read only Read/write Read only (Add‑on) Read‑write (Add‑on)
App channels * N/A Can publish promotional video channels to the Xbox console for viewing through OneGuide. N/A N/A
Service configuration * Can view settings related to achievements, multiplayer, leaderboards and other Xbox Live configuration for the product. Can view and edit settings related to achievements, multiplayer, leaderboards and other Xbox Live configuration for the product. N/A N/A

* Permissions marked with an asterisk (*) grant access to features which are not available to all accounts. If your account has not been enabled for these features, your selections for these permissions will not have any effect.