Assign roles, permissions, and workspace access to users

  • Article

Appropriate roles: Account admin | Global admin | User management admin

You determine the access your users have to Partner Center by the roles you assign to them. Each program has roles specific to the business it relates to. For example, if your business is a Cloud Solution Provider (CSP) business, your users need roles specific to the CSP program, not just standard Microsoft Entra tenant management roles such as global admin.

Microsoft Entra tenant roles and non-Azure AD roles

  • Microsoft Entra tenant roles include global admin, user admin, and CSP roles.
  • Non-Azure-AD roles are roles that don't manage the tenant. They include business profile admin, referral admin, incentive admin, incentive user, and Microsoft AI Cloud Partner Program (formerly the Microsoft Partner Network) partner admin.

User roles, permissions, and workspace access

Nine tables in this article list Partner Center user roles, the permissions granted by those roles, and the workspaces those roles have access to.

The tables are as follows:

This article doesn't describe all roles, such as roles in the Microsoft marketplace and roles with privileges for various GDAP capabilities.

Note

The Owner role is assigned to the user who enrolled in the program. An existing owner with Microsoft Entra account can assign owner permissions to other Microsoft Entra users. If the current Owner doesn't have a Microsoft Entra account, then create a support ticket to change the owner.

Role assignments or changes done in Azure portal can take up to one hour to appear in Partner Center.

Editing user permissions isn't supported in national clouds, including Microsoft Cloud for US Government and Microsoft Azure and Microsoft 365 operated by 21Vianet in China.

Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP roles)

This table lists the Microsoft Entra ID and CSP roles you can assign to users. It also shows the workspaces and other access granted with those user roles.

Workspace Level of access User Role Learn more
Customers Customer management Admin agent Connect with your customers
Customers View all partner profiles User management admin
Customers Request a relationship with a customer Sales agent *
Customers View the customer agreement Sales agent *
Pricing View agreements, price lists, and offers Global admin
Pricing View pricing and offers Admin agent
Pricing View pricing and offers Sales agent *
Account settings Can access all Microsoft account/services with full privileges Global admin Manage your Partner Center account
Account settings View, create, and manage all partner users Global admin Create user accounts and assign roles.
Only a Global admin can reset a password for a global admin.
Account settings Add device list to the Partner Center Admin agent
Account settings Create and apply profiles to devices Admin agent
Account settings Subscription management Admin agent
Account settings Cancel Azure subscription Global admin
Account settings Request delegated administrator privileges Admin agent
Account settings Administer on behalf of a customer Admin agent
Account settings Register a value-added reseller Admin agent
Account settings Add device list to the Partner Center Sales agent *
Account settings Subscription management Sales agent *
Account settings Enroll a value-added reseller Sales agent *
Account settings View my learning profile Default user Link or unlink a Microsoft Certification profile ID (MCID) to a PartnerID
Account settings View my profile Default user Reset your password
Billing View and manage billing, invoices, and reconciliation files Global admin, Billing admin, Admin agent Read your bill
Billing View and manage Azure spending budgets Admin agent Set an Azure spending budget for customers
Billing Manage billing issues on behalf of customers Billing admin Provide billing support for your customers and help answer their billing questions
Referrals Manage customer leads Sales agent *

Note

* The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.

Return to top

Manage Microsoft AI Cloud Partner Program membership and your company

This table lists the roles you can assign to users so they can view and manage memberships, competencies, programs, and benefits in the Microsoft AI Cloud Partner Program. It also shows the workspace access granted with those user roles.

Workspace Level of access User Role Learn more
Membership View, create, and manage partner service requests Microsoft AI Cloud Partner Program partner admin
Membership View user details and their skills data Microsoft AI Cloud Partner Program partner admin Skills report in Partner Center
Membership View Solutions partner designations Microsoft AI Cloud Partner Program partner admin Introduction to Solutions partner designations
Membership View and purchase Microsoft AI Cloud Partner Program offers Microsoft AI Cloud Partner Program partner admin Buy or renew a Microsoft Action Pack subscription or silver and gold competencies
Membership View Microsoft AI Cloud Partner Program offers order history and invoices Microsoft AI Cloud Partner Program partner admin
Membership View partner contribution indicator data Microsoft AI Cloud Partner Program partner admin
Membership Can work in the Voucher Validation tool Microsoft AI Cloud Partner Program partner admin
Benefits View and manage benefits Microsoft AI Cloud Partner Program partner admin
Benefits View, create, and manage users User management admin Manage your Microsoft AI Cloud Partner Program membership benefits and offers in Partner Center
Account settings Add locations Account admin Manage locations
Account settings Manage profiles related to the accounts you're the admin for Account admin
Account settings Assign roles for users in tenant to non-Azure-AD roles Account admin
Account settings View legal, company, business, and Microsoft AI Cloud Partner Program profiles Microsoft AI Cloud Partner Program partner admin Verify your company profile
Account settings View other user roles within company, but can't assign roles Microsoft AI Cloud Partner Program partner admin
Account settings Enroll locations into programs Account admin
Account settings Export learning users Microsoft AI Cloud Partner Program partner admin
Insights View customer data analytics Microsoft AI Cloud Partner Program partner admin

Return to top

Manage referrals

This table lists roles you can assign to users so they can create, manage, edit, assign, register, or view in the Referrals workspace. (See Scope of referral roles in the next table for the scope of deals that Referrals users can make.)

Workspace Level of access User Role Learn more
Referrals Create and manage everything under Referrals tab in Partner Center Referrals admin Manage Co-sell opportunities
Referrals Can view and edit all the co-sell opportunities and leads Referrals admin
Referrals Can assign team members for a deal Referrals admin
Referrals Can view and edit business profiles Referrals admin
Referrals Can view and register deals for opportunities that are marked as won and eligible for deal registration Referrals admin
Referrals Create and manage co-sell opportunities only if they're a part of the team Referrals user Manage Co-sell opportunities
Referrals Can create co-sell opportunities for the locations where they're assigned the role. Referrals user
Referrals Can view and register deals for opportunities that are marked as won and eligible for deal registration if they're team member. Referrals user
Referrals Create and manage business profiles Business profile admin Manage business profiles
Referrals Can access Co-sell solution tab from Referrals workspace to add or update the listings/documents and contacts for solutions that are already live in the marketplace storefront. Co-sell Solution admin Configure Co-sell solution

If the user is an admin for referrals, they have full access to that workspace. If the user only needs access to a specific location, then the user role needs to be manually added to that location. This ensures the user doesn't have access to the whole account but rather only to a location.

Return to top

Scope of referral roles

This table shows the scope of deals that users with Referrals privileges can make.

Workspace Scope What you can do
Referrals Entire company Both admins and users have access to create deals for any location in their company.
Referrals Referral admin has access to view and edit all the deals.
Referrals Referral users have access to view and edit all the deals only if they're a part of the team.
Referrals One or more locations Both admins and users have access to create deals for the assigned location in their company.
Referrals Referral admin has access to view and edit all the deals belonging to the assigned locations.
Referrals Referrals users have access to view and edit all the deals belonging to the assigned locations if they're part of the team.

Return to top

Manage incentives

This table lists roles you can assign to users so they can initiate, manage, edit, dispute, or view in the Incentives workspace.

Workspace Level of access User Role Learn more
Incentives Initiates and manages incentives Incentives admin Use these resources to help you get started with incentives
Incentives Can view and edit all aspects of incentives programs Incentives admin
Incentives Can view and edit bank and tax details Incentives admin
Incentives View rebate and co-op earnings Incentives admin
Incentives Dispute incentives payments Incentives admin
Incentives Can view incentives programs Incentives user
Incentives Can view and initiate incentives claims Incentives user
Incentives View rebate and co-op earnings Incentives user

If the user is an admin for incentives, they have full access to that workspace. If the user only needs access to a specific location, then the user role needs to be manually added to that location. This ensures the user doesn't have access to the whole account, but rather only to a location.

Return to top

View Partner Center Insights data

This table lists roles you can assign to users so they can access and view insights in the Insights workspace.

Workspace Area Level of access User Role Learn more
Insights Membership View membership analytics related to all Partner Programs Microsoft AI Cloud Partner Program Partner Admin
Insights Cloud Product Performance Access to all reporting datasets related to the usage telemetry and revenue of Products in all cloud solution areas Executive report viewer Overview dashboard reports available in Partner Center Insights
Insights Cloud Product Performance Access to data reports with exception of revenue and customer and employee personal data for all reporting datasets related to the usage telemetry and revenue of Products in all cloud solution areas Report viewer
Insights Marketplace Offers Access to insights for all "Commercial marketplace" and "Microsoft 365 and Copilot" apps. Developer
Insights Marketplace Offers Access to insights for all "Commercial marketplace" and "Microsoft 365 and Copilot" apps. This role also allows you to programmatically access the marketplace insights reports. Manager Programmatically access the Marketplace insights reports
Insights Referral Insights Access to all Referral Insights reports at PGA level Referral Admin
Insights Referral Insights Access to all Referral Insights reports at PGA level Global Admin
Insights Surface Insights Access to all Surface Insights reports at PGA level Executive report viewer

Return to top

Control Panel Vendor

This table shows the roles with access to Control Panel Vendor (CPV) capabilities.

A Control Panel Vendor (CPV) is an independent software vendor that develops applications for use by CSP partners to enable them to integrate their systems with Partner Center APIs. A Control Panel vendor isn't a CSP Partner with direct access to the Partner Center or Partner Center APIs.

Workspace Level of access User Role Learn more
Account settings View and manage your CPV profile Global admin Enroll as a Control Panel Vendor to help integrate CSP partner systems with Partner Center APIs
Account settings View and manage any of your users who need access to CPV capabilities Global admin

Return to top

Guest user

A user can be added as a guest on the Microsoft Entra tenant. Their access to Partner Center capabilities depends on the role the admin assigns them on the Microsoft Entra tenant.

Guest user User Roles
Microsoft AI Cloud Partner Program Partner Admin
Business profile admin
Referrals admin

Note

To access, view, or manage an account, a guest user need to be assigned an admin role. For a Microsoft AI Cloud Partner Program account, a guest user must have the Global admin or Microsoft AI Cloud Partner Program Partner Admin role. (Otherwise, they'll see the message, "Access denied. Please contact your company's global admin and ask them to grant you the appropriate access permissions.")

Return to top

Help + support

This table lists roles you can assign to users, and the level of help and support that they can create, view, access, or provide.

Workspace Level of access User Role Learn more
Help + support Create support requests for Partner Center.
View partner support requests that you create.		 Global admin, Account admin, Helpdesk agent, Microsoft AI Cloud Partner Program Partner Admin, Incentives admin, Incentives user, Admin agent, User management admin, Billing admin, Referrals admin, Referrals user, Business profile admin, Sales agent (The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.)
Help + support View and manage all partner support requests created by yourself and others in your organization Support request admin View support requests
Customers Service health and service requests for customers Admin agent
Customers Search for and view a customer Helpdesk agent
Customers Edit customer details Helpdesk agent
Customers Help resolve customer issues with billing or subscription management Helpdesk agent
Customers Request support on behalf of customers Helpdesk agent

Return to top

Next steps

Read the following articles for more information about roles and permissions.