Roles, permissions, and workspace access for users
Appropriate roles: Account admin | Global admin | User management admin
You determine the access your users have to Partner Center by the roles you assign to them. Each program has roles specific to the business it relates to. For example, if your business is a Cloud Solution Provider (CSP) business, your users need roles specific to the CSP program, not just standard Microsoft Entra tenant management roles such as global admin.
The tables in this article are listed per Partner Center user role. The tables list the permissions granted by those roles, and the workspaces those roles have access to.
This article doesn't describe all roles, such as roles in the Microsoft marketplaces and roles with privileges for various granular delegated admin privileges (GDAP) capabilities.
Note
Role assignments or changes done in Azure portal can take up to one hour to appear in Partner Center.
Editing user permissions isn't supported in national clouds, including Microsoft Cloud for US Government and Microsoft Azure and Microsoft 365 operated by 21Vianet in China.
Microsoft Entra tenant roles, and non-Azure AD roles
- Microsoft Entra tenant roles include global admin, user admin, and CSP roles.
- Non-Azure-AD roles are roles that don't manage the tenant. They include business profile admin, referral admin, incentive admin, incentive user, and Microsoft AI Cloud Partner Program (formerly the Microsoft Partner Network) partner admin.
List of roles
This section lists the roles described in this topic. You can use the links in this list to jump directly to role-specific sections in this article:
Role descriptions and details
Account admin role
This role is an administrative role available to Partners enrolled in Microsoft AI Cloud Partner Program. The Account admin role grants users access to perform several key actions in the Account Settings workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Add locations | Manage locations |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Assign roles for users in tenant to non-Azure-AD roles | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Enroll locations into programs | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Manage profiles related to the accounts you're the admin for | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Return to "List of roles" at top of page
Admin agent role
This role is available to Partners enrolled in Cloud Solution Provider program. The Admin agent role grants users access to perform several key actions in the Account Settings, Billing, Customers, and Pricing workspace. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Add device list to the Partner Center | |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Register a value-added reseller | |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Subscription management | |
| Billing | View and manage Azure spending budgets | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Set an Azure spending budget for customers |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Administer on behalf of a customer | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Create and apply profiles to devices | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request delegated administrator privileges | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request a partnership with an Indirect reseller | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request a relationship with a customer | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View the customer agreement | |
| Customers | The level of help and support the user can create, view, access, or provide. | Service health and service requests for customers | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Pricing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View pricing and offers |
Return to "List of roles" at top of page
Billing admin role
This role is available to Partners enrolled in Cloud Solution Provider program. The Billing admin role grants users access to perform several key actions in the Billing workspace. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Billing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Manage billing issues on behalf of customers | Provide billing support for your customers and help answer their billing questions |
| Billing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View and manage billing, invoices, and reconciliation files | Read your bill |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Return to "List of roles" at top of page
Business profile admin role
This role is available to Partners enrolled in Microsoft AI Cloud Partner Program. The Business profile admin role grants users access to perform several key actions in the Referrals workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Referrals[3] See Scope of referral roles in this article. |
Manage referrals | Create and manage business profiles | Manage business profiles |
Return to "List of roles" at top of page
Co-sell Solution admin role
This role is available to Partners enrolled in Microsoft AI Cloud Partner Program. The Co-sell Solution admin role grants users access to perform several key actions in the Referrals workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Referrals[3] See Scope of referral roles in this article. | Manage referrals | Can access Co-sell solution tab from Referrals workspace to add or update the listings/documents and contacts for solutions that are already live in the marketplace storefront. | Configure Co-sell solution |
Return to "List of roles" at top of page
Default user role
This role is available to Partners enrolled in any program. The Default user role grants the least privilege across all the roles. This is assigned by default to all users in the Microsoft Entra ID tenant who login to Partner Center.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View my learning profile | Link or unlink a Learn profile to a PartnerID |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View my profile | Reset your password |
Return to "List of roles" at top of page
Executive report viewer role
This role is available to Partners enrolled in the Microsoft AI Cloud Partner Program. The Executive report viewer role grants users access to perform several key actions in the Insights workspace.
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Cloud Product Performance | Access to all reporting datasets related to the usage telemetry and revenue of Products in all cloud solution areas | Overview dashboard reports available in Partner Center Insights |
| Insights | View Partner Center Insights data | Surface Insights | Access to all Surface Insights reports at partner global account (PGA) level |
Return to "List of roles" at top of page
Global admin role
This is an administrative role available to Partners enrolled in many different programs. The Global admin role grants users access to perform several key actions in the Account Settings, Billing, Pricing, and Insights workspaces. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Control panel vendor | View and manage any of your users who need access to Control Panel vendor (CPV) capabilities | |
| Account settings | Control panel vendor | View and manage your CPV profile | Enroll as a Control Panel Vendor to help integrate CSP partner systems with Partner Center APIs |
| Account settings | Manage Partner Center (Microsoft Entra ID and CSP) | Can access all Microsoft account/services with full privileges | Manage your Partner Center account |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Cancel Azure subscription | |
| Account settings | Manage users in Partner Center (Microsoft Entra ID and CSP) | View, create, and manage all partner users | Create user accounts and assign roles. Only a Global admin can reset a password for a global admin. |
| Billing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View and manage billing, invoices, and reconciliation files | Read your bill |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Pricing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View agreements, price lists, and offers |
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Referral Insights | Access to all Referral Insights reports at partner global account (PGA) level |
Return to "List of roles" at top of page
Guest user role
A user can be added as a guest on the Microsoft Entra tenant. The Guest user's access to Partner Center capabilities depends on the role the admin assigns them on the Microsoft Entra tenant.
| User Roles | Guest user[4] |
|---|---|
| Business profile admin | Guest user |
| Microsoft AI Cloud Partner Program Partner Admin | Guest user |
| Referrals admin | Guest user |
Note
To access, view, or manage an account, a guest user must be assigned an admin role. For a Microsoft AI Cloud Partner Program account, a guest user must have the Global admin or Microsoft AI Cloud Partner Program Partner Admin role. (Otherwise, they'll see the message, "Access denied. Please contact your company's global admin and ask them to grant you the appropriate access permissions.")
Return to "List of roles" at top of page
Helpdesk agent role
This role is available to Partners enrolled in Cloud Solution Provider program. The Helpdesk agent role grants users access to perform several key actions in the Customers workspace. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Customers | The level of help and support the user can create, view, access, or provide. | Search for and view a customer | |
| Customers | The level of help and support the user can create, view, access, or provide. | Edit customer details | |
| Customers | The level of help and support the user can create, view, access, or provide. | Help resolve customer issues with billing or subscription management | |
| Customers | The level of help and support the user can create, view, access, or provide. | Request support on behalf of customers | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Return to "List of roles" at top of page
Incentives admin role
This is an administrative role available to Partners enrolled in any program. The Incentives admin role grants incentives. It grants users access to perform several key actions in the Incentives workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Incentives[1] | Manage incentives | Initiates and manages incentives | Use these resources to help you get started with incentives |
| Incentives | Manage incentives | Can view and edit all aspects of incentives programs | |
| Incentives | Manage incentives | Can view and edit bank and tax details | |
| Incentives | Manage incentives | View rebate and co-op earnings | |
| Incentives | Manage incentives | Dispute incentives payments | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Marketplace Offers | Access to insights for all "Commercial marketplace" and "Microsoft 365 and Copilot" apps. This role also allows you to programmatically access the marketplace insights reports. | Programmatically access the Marketplace insights reports |
Return to "List of roles" at top of page
Incentives user role
This is a role available to Partners enrolled in any program that grants incentives. The Incentives user role grants users access to perform several key actions in the Incentives workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Incentives[1] | Manage incentives | Can view incentives programs | |
| Incentives | Manage incentives | Can view and initiate incentives claims | |
| Incentives | Manage incentives | View rebate and co-op earnings | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Return to "List of roles" at top of page
Microsoft AI Cloud Partner Program partner admin role
This is an administrative role available to Partners enrolled in Microsoft AI Cloud Partner Program. The Microsoft AI Cloud Partner Program partner admin role grants users access to perform several key actions in the Account Settings, Benefits, Membership and Insights workspaces.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Export learning users | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | View other user roles within company, but can't assign roles | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | View legal, company, business, and Microsoft AI Cloud Partner Program profiles | Verify your company profile |
| Benefits | Manage Microsoft AI Cloud Partner Program membership and your company | View and manage benefits | |
| Insights | Manage Microsoft AI Cloud Partner Program membership and your company | View customer data analytics | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | Can work in the Voucher Validation tool | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View and purchase Microsoft AI Cloud Partner Program offers | Buy or renew a Microsoft Action Pack subscription or silver and gold competencies |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View, create, and manage partner service requests | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View Microsoft AI Cloud Partner Program offers order history and invoices | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View partner contribution indicator data | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View Solutions partner designations | Introduction to Solutions partner designations |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View user details and their skills data | Skills report in Partner Center |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Membership | View membership analytics related to all Partner Programs |
Return to "List of roles" at top of page
Referrals roles
These roles are available to Partners enrolled in Microsoft AI Cloud Partner Program. The Referrals role grants users access to perform several key actions in the Referrals workspace. There are three key sections: Referrals admin, Referrals user, and Scope of referral roles.
Referrals admin role
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Referrals[3] See Scope of referral roles in this article. | Manage referrals | Can assign team members for a deal | |
| Referrals See Scope of referral roles in this article. |
Manage referrals | Can view and edit all the co-sell opportunities and leads | |
| Referrals See Scope of referral roles in this article. |
Manage referrals | Can view and edit business profiles | |
| Referrals See Scope of referral roles in this article. |
Manage referrals | Can view and register deals for opportunities that are marked as won and eligible for deal registration | |
| Referrals See Scope of referral roles in this article. |
Manage referrals | Create and manage everything under Referrals tab in Partner Center | Manage Co-sell opportunities |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Referral Insights | Access to all Referral Insights reports at partner global account (PGA) level |
Return to "List of roles" at top of page
Referrals user role
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Referrals[3] See Scope of referral roles in this article. |
Manage referrals | Can create co-sell opportunities for the locations where they're assigned the role. | |
| Referrals See Scope of referral roles in this article. |
Manage referrals | Can view and register deals for opportunities that are marked as won and eligible for deal registration if they're team member. | |
| Referrals See Scope of referral roles in this article. |
Manage referrals | Create and manage co-sell opportunities only if they're a part of the team | Manage Co-sell opportunities |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Return to "List of roles" at top of page
Scope of referral roles
This table shows the scope of deals that users with Referrals privileges can make.
| Workspace | Scope | What you can do |
|---|---|---|
| Referrals[3] |
Referral admin has access to view and edit all the deals. | |
| Referrals | Referral admin has access to view and edit all the deals belonging to the assigned locations. | |
| Referrals | Referrals users have access to view and edit all the deals belonging to the assigned locations if they're part of the team. | |
| Referrals | Referral users have access to view and edit all the deals only if they're a part of the team. | |
| Referrals | Entire company | Both admins and users have access to create deals for any location in their company. |
| Referrals | One or more locations | Both admins and users have access to create deals for the assigned location in their company. |
Report viewer role
This role is available to Partners enrolled in several different programs. The Report viewer role grants users access to perform several key actions in the Insights workspace.
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Cloud Product Performance | Access to data reports with exception of revenue and customer and employee personal data for all reporting datasets related to the usage telemetry and revenue of Products in all cloud solution areas |
Return to "List of roles" at top of page
Sales agent role
This role is available to Partners enrolled in Cloud Solution Provider program (Direct Bill and Indirect Providers only). The Sales agent role grants users access to perform several key actions in the Accounts Settings, Customers, Pricing, and Referrals workspaces. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Enroll a value-added reseller | |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Subscription management | |
| Customer | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Add device list to the Partner Center | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request a partnership with an Indirect reseller | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request a relationship with a customer | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View the customer agreement | |
| Pricing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View pricing and offers | |
| Referrals | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Manage customer leads | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Return to "List of roles" at top of page
Security administrator role
This is an administrative role available to Partners enrolled in Cloud Solution Provider program (Direct Bill and Indirect Providers only). The Security administrator role grants users access to perform several key actions in the Security workspace. This can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Security | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Take action on Security posture |
Return to "List of roles" at top of page
Security reader role
This is a role available to Partners enrolled in Cloud Solution Provider program (Direct Bill and Indirect Providers only). The Security reader role grants users access to perform several key actions in the Security workspace. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Security | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View Security posture |
Return to "List of roles" at top of page
Support request admin role
This is a role available to Partners enrolled in several programs. The Support request admin role grants users access to perform several key actions in the Help + Support workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | View and manage all partner support requests created by yourself and others in your organization | View support requests |
Return to "List of roles" at top of page
User management admin role
This is a role available to Partners enrolled in Microsoft AI Cloud Partner Program and Cloud Solution Provider program. The User management admin role grants users access to perform several key actions in the Benefits and Customers workspaces. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Benefits | View, create, and manage users | Manage Microsoft AI Cloud Partner Program membership and your company | Manage your Microsoft AI Cloud Partner Program membership benefits and offers in Partner Center |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View all partner profiles | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Return to "List of roles" at top of page
Footnotes
(1) If the user is an admin for incentives, they have full access to that workspace. If the user only needs access to a specific location, then the user role needs to be manually added to that location. This ensures the user doesn't have access to the whole account, but rather only to a location.
(2) The full list of User Roles in the Help + support workspace, with the level of access: Create support requests for Partner Center and View partner support requests that you create are:
Billing admin
Global admin
Incentives admin
Microsoft AI Cloud Partner Program - Partner Admin
Referrals admin
*Sales agent
Business profile admin
Helpdesk agent
Incentives user
Referrals user
User management admin
*The "Sales agent" role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.
(3) If the user is an admin for referrals, they have full access to that workspace. If the user only needs access to a specific location, then the user role must be manually added to that location. This ensures the user doesn't have access to the whole account but rather only to a location.
(4) To access, view, or manage an account, a guest user must be assigned an admin role. For a Microsoft AI Cloud Partner Program account, a guest user must have the Global admin or Microsoft AI Cloud Partner Program Partner Admin role. (Otherwise, they'll see the message, "Access denied. Contact your company's global admin and ask them to grant you the appropriate access permissions.")
Return to "List of roles" at top of page
Related content
Read the following articles for more information about roles and permissions.
- Assign user roles and permissions for Microsoft marketplace
- Set roles or custom permissions for account users for Windows and Xbox
- Create user accounts, assign roles, and permissions
- Verify your account information when you enroll in a new Partner Center program
- Find your workspaces, roles, and admins