Services Hub roles and permissions
Overview
This guide explains the interrelation between Users, Roles, and Permissions in the Services Hub. It also outlines the available permissions within the platform.
Users
A user account can have multiple roles and individual permissions assigned to it. Access to Services Hub's digital features depends on the permissions assigned to the user. A comprehensive list of permissions can be found in the following tables.
Roles
The following are the roles in the Services Hub, each with a set of associated permissions.
- Services Admin: A customer role with Workspace Administrator permissions for the first workspace created when a customer initially signs up for support. They also have full access to the Cloud Support Request Visibility dashboard.
- Workspace Administrator: A customer role with full permissions within a single workspace.
- Services Hub Global Administrator: A customer role with administrative capabilities and feature-level access at the customer level.
- Customer Success Account Manager (CSAM): A Microsoft role with administrative capabilities at the customer level and for each of their customer’s workspaces
- Incident Manager (IM): A Microsoft role with access to each of their customer’s workspaces and a subset of permissions
Individual Permissions
Customer Level Permissions
| Permission | Capability |
|---|---|
| Customer Level Administrator | Access to the Admin Center and multiple administrative capabilities. Additional details of the specific administrative capabilities are listed in the Customer Level Administrator table below. |
| Microsoft Customer Level Administrator | Full access to the Admin Center and administrative capabilities. |
| View Open Canvas | Ability to view Open Canvas Reports. |
| Manage Open Canvas | Ability to manage Open Canvas. For more information, see Manage Access. |
| View Cloud Support Request Visibility Dashboard | Read-Only access to the Cloud Support Request Visibility Dashboard. |
| Manage Cloud Support Request Visibility Dashboard | Full access to the Cloud Support Request Visibility Dashboard. |
| View Engagement | View Access to Engagement Views. |
Workspace Level Permissions
| Permission | Capability |
|---|---|
| Support Contact | Open or view the status of Support requests |
| View all support cases | View all support cases associated with this workspace1 |
| Learning Manager | Learning Management access |
| Learning | Learning Content access |
| Customer Activity | Access to view the Customer Activity page |
| Programs | Access to the Programs feature |
| Invite Users | Invite additional users to this workspace |
| Manage Users | Manage user permissions at the Workspace level |
| Health | Access to the On-Demand Assessment features2 |
| Shared Files | Access to Shared Files for this workspace |
| Customer Pulse Survey | Deprecated feature |
| Contract Details | Deprecated feature |
1Even with the “View all support cases” permission, you may not be able to view all support cases if consent has not been provided for cloud assets. For more information, see Cloud Support Request Visibility dashboard.
2To learn more about how Azure roles relate to On-Demand Assessments, see How Azure roles for Log Analytics relate to the Services Hub.
Permissions by Role
Legend:
X - Permission is inherited by being a member of this role.
G - Permission can be granted individually to a user.
Customer Level
| Permission | Services Admin | Workspace Administrator | Services Hub Global Administrator | CSAM | IM | User |
|---|---|---|---|---|---|---|
| Customer Level Administrator | X | |||||
| Microsoft Customer Level Administrator | X | |||||
| View Open Canvas | X | X | X1 | G1 | ||
| Manage Open Canvas | X | X | X | G | ||
| View Cloud SUpport Request Visibility Dashboard | X | X | X | |||
| Manage Cloud Support Request Visibility Dashboard | X | X | ||||
| View Engagement | X | X | G |
1Microsoft users cannot export data from the Services Hub.
Workspace Level
| Permission | Services Admin | Workspace Administrator | Services Hub Global Administrator | CSAM | IM | User |
|---|---|---|---|---|---|---|
| Support Contact | G | |||||
| View all support cases | X2 | X | X1 | X | G1 | |
| Learning Manager | X2 | X | X | G | ||
| Learning | X2 | X | X | X | G | |
| Customer Activity | X2 | X | X1 | G1 | ||
| Programs | X2 | X | X | X | G | |
| Invite Users | X2 | X | X | X | G | |
| Manage Users | X2 | X | X | |||
| Health | X2 | X | X | X | G | |
| Shared Files | X2 | X | X | X | G |
1Microsoft users cannot export data from the Services Hub.
2Services Admins are automatically configured as Workspace Admins on the first workspace that was created when a customer signs up for support.
Customer Level Administrator
The following table details the Customer Level Administrator’s capabilities within the Admin Center.
| Admin Center Page | Tab | Permission Set |
|---|---|---|
| Customer | All | Edit Customer Name |
| Customer | Global Administrators | Manage Global Administrators |
| Customer | Customer Settings | Enable/Disable showing personal names in Learning reports |
| Customer | Customer Settings | Enable/Disable in-product Feedback capability |
| Customer | Customer Management | Manage access to customer level features like Open Canvas and Engagement views |
| Customer | Newsletter | Manage Newsletter subscriptions and subscribers |
| Workspace | Workspace | View, Edit, and Delete Workspaces |
| Workspace | Workspace | Enable/Disable MSA Exception |