Roles, permissions, and workspace access for users
Appropriate roles: Account admin | Global admin | User management admin
You determine the access your users have to Partner Center by the roles you assign to them. Each program has roles specific to the business it relates to. For example, if your business is a Cloud Solution Provider (CSP) business, your users need roles specific to the CSP program, not just standard Microsoft Entra tenant management roles such as global admin.
The tables in this article list Partner Center user roles, the permissions granted by those roles, and the workspaces those roles have access to.
This article doesn't describe all roles, such as roles in the Microsoft marketplace and roles with privileges for various granular delegated admin privileges (GDAP) capabilities.
Note
The Owner role is assigned to the user who enrolled in the program. An existing owner with Microsoft Entra account can assign owner permissions to other Microsoft Entra users. If the current Owner doesn't have a Microsoft Entra account, then create a support ticket to change the owner.
Role assignments or changes done in Azure portal can take up to one hour to appear in Partner Center.
Editing user permissions isn't supported in national clouds, including Microsoft Cloud for US Government and Microsoft Azure and Microsoft 365 operated by 21Vianet in China.
Microsoft Entra tenant roles, and non-Azure AD roles
- Microsoft Entra tenant roles include global admin, user admin, and CSP roles.
- Non-Azure-AD roles are roles that don't manage the tenant. They include business profile admin, referral admin, incentive admin, incentive user, and Microsoft AI Cloud Partner Program (formerly the Microsoft Partner Network) partner admin.
Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP roles)
This table lists the Microsoft Entra ID and CSP roles you can assign to users. It also shows the workspaces and other access granted with those user roles.
Workspace | Level of access | User role | Learn more |
---|---|---|---|
Customers | Customer management | Connect with your customers | |
Customers | View all partner profiles | User management admin | |
Customers | Request a relationship with a customer | Admin agent, Sales agent * | |
Customers | Request a partnership with an Indirect reseller | Admin agent, Sales agent * | |
Customers | View the customer agreement | Admin agent, Sales agent * | |
Pricing | View agreements, price lists, and offers | Global admin | |
Pricing | View pricing and offers | Admin agent | |
Pricing | View pricing and offers | Sales agent * | |
Account settings | Can access all Microsoft account/services with full privileges | Global admin | Manage your Partner Center account |
Account settings | View, create, and manage all partner users | Global admin | Create user accounts and assign roles. Only a Global admin can reset a password for a global admin. |
Account settings | Add device list to the Partner Center | Admin agent | |
Account settings | Create and apply profiles to devices | Admin agent | |
Account settings | Subscription management | Admin agent | |
Account settings | Cancel Azure subscription | Global admin | |
Account settings | Request delegated administrator privileges | Admin agent | |
Account settings | Administer on behalf of a customer | Admin agent | |
Account settings | Register a value-added reseller | Admin agent | |
Account settings | Add device list to the Partner Center | Sales agent * | |
Account settings | Subscription management | Sales agent * | |
Account settings | Enroll a value-added reseller | Sales agent * | |
Account settings | View my learning profile | Default user | Link or unlink a Learn profile to a PartnerID |
Account settings | View my profile | Default user | Reset your password |
Billing | View and manage billing, invoices, and reconciliation files | Global admin, Billing admin | Read your bill |
Billing | View and manage Azure spending budgets | Admin agent | Set an Azure spending budget for customers |
Billing | Manage billing issues on behalf of customers | Billing admin | Provide billing support for your customers and help answer their billing questions |
Referrals | Manage customer leads | Sales agent * | |
Security | Take action on Security posture | Security administrator | |
Security | View Security posture | Security reader |
Note
* The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.
Manage Microsoft AI Cloud Partner Program membership and your company
This table lists the roles you can assign to users so they can view and manage memberships, competencies, programs, and benefits in the Microsoft AI Cloud Partner Program. It also shows the workspace access granted with those user roles.
Workspace | Level of access | User role | Learn more |
---|---|---|---|
Membership | View, create, and manage partner service requests | Microsoft AI Cloud Partner Program partner admin | |
Membership | View user details and their skills data | Microsoft AI Cloud Partner Program partner admin | Skills report in Partner Center |
Membership | View Solutions partner designations | Microsoft AI Cloud Partner Program partner admin | Introduction to Solutions partner designations |
Membership | View and purchase Microsoft AI Cloud Partner Program offers | Microsoft AI Cloud Partner Program partner admin | Buy or renew a Microsoft Action Pack subscription or silver and gold competencies |
Membership | View Microsoft AI Cloud Partner Program offers order history and invoices | Microsoft AI Cloud Partner Program partner admin | |
Membership | View partner contribution indicator data | Microsoft AI Cloud Partner Program partner admin | |
Membership | Can work in the Voucher Validation tool | Microsoft AI Cloud Partner Program partner admin | |
Benefits | View and manage benefits | Microsoft AI Cloud Partner Program partner admin | |
Benefits | View, create, and manage users | User management admin | Manage your Microsoft AI Cloud Partner Program membership benefits and offers in Partner Center |
Account settings | Add locations | Account admin | Manage locations |
Account settings | Manage profiles related to the accounts you're the admin for | Account admin | |
Account settings | Assign roles for users in tenant to non-Azure-AD roles | Account admin | |
Account settings | View legal, company, business, and Microsoft AI Cloud Partner Program profiles | Microsoft AI Cloud Partner Program partner admin | Verify your company profile |
Account settings | View other user roles within company, but can't assign roles | Microsoft AI Cloud Partner Program partner admin | |
Account settings | Enroll locations into programs | Account admin | |
Account settings | Export learning users | Microsoft AI Cloud Partner Program partner admin | |
Insights | View customer data analytics | Microsoft AI Cloud Partner Program partner admin |
Manage referrals
This table lists roles you can assign to users so they can create, manage, edit, assign, register, or view in the Referrals workspace. (See Scope of referral roles in the next table for the scope of deals that Referrals users can make.)
Workspace | Level of access | User role | Learn more |
---|---|---|---|
Referrals | Create and manage everything under Referrals tab in Partner Center | Referrals admin | Manage Co-sell opportunities |
Referrals | Can view and edit all the co-sell opportunities and leads | Referrals admin | |
Referrals | Can assign team members for a deal | Referrals admin | |
Referrals | Can view and edit business profiles | Referrals admin | |
Referrals | Can view and register deals for opportunities that are marked as won and eligible for deal registration | Referrals admin | |
Referrals | Create and manage co-sell opportunities only if they're a part of the team | Referrals user | Manage Co-sell opportunities |
Referrals | Can create co-sell opportunities for the locations where they're assigned the role. | Referrals user | |
Referrals | Can view and register deals for opportunities that are marked as won and eligible for deal registration if they're team member. | Referrals user | |
Referrals | Create and manage business profiles | Business profile admin | Manage business profiles |
Referrals | Can access Co-sell solution tab from Referrals workspace to add or update the listings/documents and contacts for solutions that are already live in the marketplace storefront. | Co-sell Solution admin | Configure Co-sell solution |
If the user is an admin for referrals, they have full access to that workspace. If the user only needs access to a specific location, then the user role needs to be manually added to that location. This ensures the user doesn't have access to the whole account but rather only to a location.
Scope of referral roles
This table shows the scope of deals that users with Referrals privileges can make.
Workspace | Scope | What you can do |
---|---|---|
Referrals | Entire company | Both admins and users have access to create deals for any location in their company. |
Referrals | Referral admin has access to view and edit all the deals. | |
Referrals | Referral users have access to view and edit all the deals only if they're a part of the team. | |
Referrals | One or more locations | Both admins and users have access to create deals for the assigned location in their company. |
Referrals | Referral admin has access to view and edit all the deals belonging to the assigned locations. | |
Referrals | Referrals users have access to view and edit all the deals belonging to the assigned locations if they're part of the team. |
Manage incentives
This table lists roles you can assign to users so they can initiate, manage, edit, dispute, or view in the Incentives workspace.
Workspace | Level of access | User role | Learn more |
---|---|---|---|
Incentives | Initiates and manages incentives | Incentives admin | Use these resources to help you get started with incentives |
Incentives | Can view and edit all aspects of incentives programs | Incentives admin | |
Incentives | Can view and edit bank and tax details | Incentives admin | |
Incentives | View rebate and co-op earnings | Incentives admin | |
Incentives | Dispute incentives payments | Incentives admin | |
Incentives | Can view incentives programs | Incentives user | |
Incentives | Can view and initiate incentives claims | Incentives user | |
Incentives | View rebate and co-op earnings | Incentives user |
If the user is an admin for incentives, they have full access to that workspace. If the user only needs access to a specific location, then the user role needs to be manually added to that location. This ensures the user doesn't have access to the whole account, but rather only to a location.
View Partner Center Insights data
This table lists roles you can assign to users so they can access and view insights in the Insights workspace.
Workspace | Area | Level of access | User role | Learn more |
---|---|---|---|---|
Insights | Membership | View membership analytics related to all Partner Programs | Microsoft AI Cloud Partner Program Partner Admin | |
Insights | Cloud Product Performance | Access to all reporting datasets related to the usage telemetry and revenue of Products in all cloud solution areas | Executive report viewer | Overview dashboard reports available in Partner Center Insights |
Insights | Cloud Product Performance | Access to data reports with exception of revenue and customer and employee personal data for all reporting datasets related to the usage telemetry and revenue of Products in all cloud solution areas | Report viewer | |
Insights | Marketplace Offers | Access to insights for all "Commercial marketplace" and "Microsoft 365 and Copilot" apps. | Developer | |
Insights | Marketplace Offers | Access to insights for all "Commercial marketplace" and "Microsoft 365 and Copilot" apps. This role also allows you to programmatically access the marketplace insights reports. | Manager | Programmatically access the Marketplace insights reports |
Insights | Referral Insights | Access to all Referral Insights reports at PGA level | Referral Admin | |
Insights | Referral Insights | Access to all Referral Insights reports at PGA level | Global Admin | |
Insights | Surface Insights | Access to all Surface Insights reports at PGA level | Executive report viewer |
Control Panel Vendor
This table shows the roles with access to Control Panel Vendor (CPV) capabilities.
A Control Panel Vendor (CPV) is an independent software vendor that develops applications for use by CSP partners to enable them to integrate their systems with Partner Center APIs. A Control Panel vendor isn't a CSP Partner with direct access to the Partner Center or Partner Center APIs.
Workspace | Level of access | User Role | Learn more |
---|---|---|---|
Account settings | View and manage your CPV profile | Global admin | Enroll as a Control Panel Vendor to help integrate CSP partner systems with Partner Center APIs |
Account settings | View and manage any of your users who need access to CPV capabilities | Global admin |
Guest user
A user can be added as a guest on the Microsoft Entra tenant. Their access to Partner Center capabilities depends on the role the admin assigns them on the Microsoft Entra tenant.
Guest user | User Roles |
---|---|
Microsoft AI Cloud Partner Program Partner Admin | |
Business profile admin | |
Referrals admin |
Note
To access, view, or manage an account, a guest user need to be assigned an admin role. For a Microsoft AI Cloud Partner Program account, a guest user must have the Global admin or Microsoft AI Cloud Partner Program Partner Admin role. (Otherwise, they'll see the message, "Access denied. Please contact your company's global admin and ask them to grant you the appropriate access permissions.")
Help + support
This table lists roles you can assign to users, and the level of help and support that they can create, view, access, or provide.
Workspace | Level of access | User Role | Learn more |
---|---|---|---|
Help + support | Create support requests for Partner Center. View partner support requests that you create. |
Global admin, Account admin, Helpdesk agent, Microsoft AI Cloud Partner Program Partner Admin, Incentives admin, Incentives user, Admin agent, User management admin, Billing admin, Referrals admin, Referrals user, Business profile admin, Sales agent (The Sales agent role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.) | |
Help + support | View and manage all partner support requests created by yourself and others in your organization | Support request admin | View support requests |
Customers | Service health and service requests for customers | Admin agent | |
Customers | Search for and view a customer | Helpdesk agent | |
Customers | Edit customer details | Helpdesk agent | |
Customers | Help resolve customer issues with billing or subscription management | Helpdesk agent | |
Customers | Request support on behalf of customers | Helpdesk agent |
Related content
Read the following articles for more information about roles and permissions.
- Assign user roles and permissions for Microsoft marketplace
- Set roles or custom permissions for account users for Windows and Xbox
- Create user accounts, assign roles, and permissions
- Verify your account information when you enroll in a new Partner Center program
- Find your workspaces, roles, and admins