Assign roles to account users
By default, a set of standard roles is presented for you to choose from when you add a user, group, or Azure AD application to your Partner Center account. Each role has a specific set of permissions in order to perform certain functions within the account.
Unless you opt to define custom permissions by selecting Customize permissions, each user, group, or Azure AD application that you add to an account must be assigned at least one of the following standard roles.
Note
The owner of the account is the person who first created it with a Microsoft account (and not any user(s) added through Azure AD). This account owner is the only person with complete access to the account, including the ability to delete apps, create and edit all account users, and change all financial and account settings.
| Role | Description |
|---|---|
| Manager | Has complete access to the account, except for changing tax and payout settings. This includes managing users in Partner Center, but note that the ability to create and delete users in the Azure AD tenant is dependent on the account's permission in Azure AD. That is, if a user is assigned the Manager role, but does not have global administrator permissions in the organization's Azure AD, they will not be able to create new users or delete users from the directory (though they can change a user's Partner Center role). Note: if the Partner Center account is associated with more than one Azure AD tenant, a Manager can’t see complete details for a user (including first name, last name, password recovery email, and whether they are an Azure AD global administrator) unless they are signed in to the same tenant as that user with an account that has global administrator permissions for that tenant. However, they can add and remove users in any tenant that is associated with the Partner Center account. |
| Developer | Can upload packages and submit apps and add-ons, and can view the Usage report for telemetry details. Can access Cross-Device Experiences functionality. Can’t view financial info or account settings. |
| Business Contributor | Can view Health and Usage reports. Can't create or submit products, change account settings, or view financial info. |
| Finance Contributor | Can view payout reports, financial info, and acquisition reports. Can’t make any changes to apps, add-ons, or account settings. |
| Marketer | Can respond to customer reviews and view non-financial analytic reports. Can’t make any changes to apps, add-ons, or account settings. |
The table below shows some of the specific features available to each of these roles (and to the account owner).
| Account owner | Manager | Developer | Business Contributor | Finance Contributor | Marketer | |
|---|---|---|---|---|---|---|
| Acquisition report (including Near Real Time data) | Can view | Can view | No access | No access | Can view | No access |
| Feedback report/responses | Can view and send feedback | Can view and send feedback | Can view and send feedback | No access | No access | Can view and send feedback |
| Health report (including Near Real Time data) | Can view | Can view | Can view | Can view | No access | No access |
| Usage report | Can view | Can view | Can view | Can view | No access | No access |
| Payout account | Can update | No access | No access | No access | Can update | No access |
| Tax profile | Can update | No access | No access | No access | Can update | No access |
| Payout summary | Can view | No access | No access | No access | Can view | No access |
If none of the standard roles are appropriate, or you wish to limit access to specific apps and/or add-ons, you can grant custom permissions to the user by selecting Customize permissions, as described in the next page.
