Roles, permissions, and workspace access for users
Appropriate roles: Account admin | Global admin | User management admin
You determine the access your users have to Partner Center by the roles you assign to them. Each program has roles that are specific to the business it relates to. For example, if your company is a Cloud Solution Provider (CSP) business, your users need roles specific to the CSP program, not only the standard Microsoft Entra tenant management roles, such as global admin.
The tables in this article are listed by Partner Center user role. The tables list the permissions granted by those roles, and the workspaces those roles can access.
This article doesn't describe all roles, such as roles in the Microsoft marketplaces and roles with privileges for various granular delegated admin privileges (GDAP) capabilities.
Note
Role assignments or changes you do in Azure portal can take up to one hour to appear in Partner Center.
Editing user permissions isn't supported in national clouds, including Microsoft Cloud for US Government and Microsoft Azure and Microsoft 365 operated by 21Vianet in China.
Assign user roles
Partner Center access is role-based. To work in Partner Center, a new user must have one or more assigned roles. A user might need to be assigned roles in any or all these categories: Cloud Solution Provider (CSP), Microsoft Entra tenant, or non-Microsoft Entra company.
- Microsoft Entra tenant roles include global admin, user admin, and CSP roles.
- Non-Azure-AD roles are roles that don't manage the tenant. They include business profile admin, referral admin, incentive admin, incentive user, and Microsoft AI Cloud Partner Program (formerly the Microsoft Partner Network) partner admin.
When you assign appropriate roles to new users, it helps ensure that they can view the information and perform the tasks they need to work effectively, without gaining unnecessary permissions.
Important
Users must be listed in your tenant to access Partner Center. Role assignments provide additional access.
Users who need changes to their assigned roles can request changes from a Global admin. They can find the right admins by going to My access and opening the workspace that they need to access.
Account admin role
This role is an administrative role available to Partners enrolled in Microsoft AI Cloud Partner Program. The Account admin role grants users access to perform several key actions in the Account Settings workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company. | Add locations | Manage locations |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company. | Assign roles for users in tenant to non-Azure-AD roles. | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company. | Enroll locations into programs. | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company. | Manage profiles related to the accounts for which you're the admin. | |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
Admin agent role
This role is available to Partners enrolled in Cloud Solution Provider program. The Admin agent role grants users access to perform several key actions in the Account Settings, Billing, Customers, and Pricing workspace. You can also assign this role to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Add device list to the Partner Center. | |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Register a value-added reseller. | |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Subscription management | |
| Billing | View and manage Azure spending budgets. | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Set an Azure spending budget for customers. |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Administer on behalf of a customer. | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Create and apply profiles to devices. | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Request delegated administrator privileges. | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Request a partnership with an Indirect reseller. | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Request a relationship with a customer. | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View the customer agreement. | |
| Customers | The level of help and support the user creates, views, accesses, or provides. | Service health and service requests for customers | |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Pricing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View pricing and offers. |
Billing admin role
This role is available to Partners enrolled in Cloud Solution Provider program. The Billing admin role grants users access to perform several key actions in the Billing workspace. You can also assign this role to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Billing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Manage billing issues on behalf of customers. | Provide billing support for your customers and help answer their billing questions. |
| Billing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View and manage billing, invoices, and reconciliation files. | Read your bill. |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
Business profile admin role
This role is available to Partners enrolled in Microsoft AI Cloud Partner Program. The Business profile admin role grants users access to perform several key actions in the Referrals workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Referrals[3] See Scope of referral roles in this article. |
Manage referrals. | Create and manage business profiles. | Manage business profiles. |
Co-sell Solution admin role
This role is available to Partners enrolled in Microsoft AI Cloud Partner Program. The Co-sell Solution admin role grants users access to perform several key actions in the Referrals workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Referrals[3] See Scope of referral roles in this article. |
Manage referrals. | They can access the Co-sell solution tab from the Referrals workspace to add or update the listings, documents, and contacts for solutions that are already live in the marketplace storefront. | Configure Co-sell solution. |
Default user role
This role is available to Partners enrolled in any program. The Default user role grants the least privilege across all the roles. This role is assigned by default to all users in the Microsoft Entra ID tenant who sign in to Partner Center.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View my learning profile. | Link or unlink a Learn profile to a PartnerID. |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View my profile. | Reset your password. |
Executive report viewer role
This role is available to Partners enrolled in the Microsoft AI Cloud Partner Program. The Executive report viewer role grants users access to perform several key actions in the Insights workspace.
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data. | Cloud Product Performance | Access all reporting datasets related to the usage telemetry and revenue of products in all cloud solution areas. | Overview dashboard reports available in Partner Center Insights. |
| Insights | View Partner Center Insights data. | Surface Insights | Access all Surface Insights reports at the partner global account (PGA) level. |
Global admin role
This role is administrative and available to Partners enrolled in many different programs. The Global admin role grants users access to perform several key actions in the Account Settings, Billing, Pricing, and Insights workspaces. You can also assign this role to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Control panel vendor. | View and manage any of your users who need access to Control Panel vendor (CPV) capabilities. | |
| Account settings | Control panel vendor. | View and manage your CPV profile. | Enroll as a Control Panel Vendor to help integrate CSP partner systems with Partner Center APIs. |
| Account settings | Manage Partner Center (Microsoft Entra ID and CSP). | Access all Microsoft account services with full privileges. | Manage your Partner Center account. |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Cancel Azure subscription. | |
| Account settings | Manage users in Partner Center (Microsoft Entra ID and CSP). | View, create, and manage all partner users. | Create user accounts and assign roles. Only a Global admin can reset a password for a global admin. |
| Billing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View and manage billing, invoices, and reconciliation files. | Read your bill. |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Pricing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View agreements, price lists, and offers. |
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data. | Referral Insights | Access to all Referral Insights reports at partner global account (PGA) level. |
Guest user role
You can add a user as a guest on the Microsoft Entra tenant. The Guest user's access to Partner Center capabilities depends on the role the admin assigns to them on the Microsoft Entra tenant.
| User Roles | Guest user[4] |
|---|---|
| Business profile admin | Guest user |
| Microsoft AI Cloud Partner Program Partner Admin | Guest user |
| Referrals admin | Guest user |
Note
To access, view, or manage an account, a guest user must be assigned an admin role. For a Microsoft AI Cloud Partner Program account, a guest user must have the Global admin or Microsoft AI Cloud Partner Program Partner Admin role. Otherwise, they see the message, Access denied. Please contact your company's global admin and ask them to grant you the appropriate access permissions.
Helpdesk agent role
This role is available to Partners enrolled in Cloud Solution Provider program. The Helpdesk agent role grants users access to perform several key actions in the Customers workspace. You can also assign this role to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Customers | The level of help and support the user creates, views, accesses, or provides. | Search for and view a customer. | |
| Customers | The level of help and support the user creates, views, accesses, or provides. | Edit customer details. | |
| Customers | The level of help and support the user creates, views, accesses, or provides. | Help resolve customer issues with billing or subscription management. | |
| Customers | The level of help and support the user creates, views, accesses, or provides. | Request support on behalf of customers. | |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
Incentives admin role
This role is an administrative role available to Partners enrolled in any program. The Incentives admin role grants incentives. It grants users access to perform several key actions in the Incentives workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Incentives[1] | Manage incentives. | Initiate and manage incentives. | Use these resources to help you get started with incentives. |
| Incentives | Manage incentives. | View and edit all aspects of incentives programs. | |
| Incentives | Manage incentives. | View and edit bank and tax details. | |
| Incentives | Manage incentives. | View rebate and co-op earnings. | |
| Incentives | Manage incentives. | Dispute incentives payments. | |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
Incentives user role
This role is available to Partners enrolled in any program that grants incentives. The Incentives user role grants users access to perform several key actions in the Incentives workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Incentives[1] | Manage incentives. | View incentives programs. | |
| Incentives | Manage incentives. | View and initiate incentives claims. | |
| Incentives | Manage incentives. | View rebate and co-op earnings. | |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
Microsoft AI Cloud Partner Program partner admin role
This role is an administrative role available to Partners who are enrolled in Microsoft AI Cloud Partner Program. The Microsoft AI Cloud Partner Program partner admin role grants users access to perform several key actions in the Account Settings, Benefits, Membership, and Insights workspaces.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company. | Export learning users. | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company. | View other user roles within company, but can't assign roles. | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company. | View legal, company, business, and Microsoft AI Cloud Partner Program profiles. | Verify your company profile. |
| Benefits | Manage Microsoft AI Cloud Partner Program membership and your company. | View and manage benefits. | |
| Insights | Manage Microsoft AI Cloud Partner Program membership and your company. | View customer data analytics. | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company. | Work in the Voucher Validation tool. | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company. | View and purchase Microsoft AI Cloud Partner Program offers such as MAPS. | Buy or renew a Microsoft Action Pack subscription or silver and gold competencies. |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company. | View, create, and manage partner service requests. | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company. | View Microsoft AI Cloud Partner Program offers order history and invoices. | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company. | View partner contribution indicator data. | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company. | View Solutions partner designations. | Introduction to Solutions partner designations |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company. | View user details and their skills data. | Use Skills report in Partner Center. |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data. | Membership | View membership analytics related to all Partner Programs. |
Referrals admin role
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Referrals[3] | Manage referrals. | Assign team members for a deal. | |
| Referrals | Manage referrals | View and edit all the co-sell opportunities and leads. | |
| Referrals | Manage referrals | View and edit business profiles. | |
| Referrals | Manage referrals | View and register deals for opportunities that are marked as won and eligible for deal registration. | |
| Referrals | Manage referrals | Create and manage everything under the Referrals tab in Partner Center. | Manage Co-sell opportunities. |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Insights (area: Referral Insights) | View Partner Center Insights data. | Access all Referral Insights reports at the partner global account (PGA) level. |
The following table shows the scope for Referrals admins.
| Workspace | Scope | What you can do |
|---|---|---|
| Referrals[3] |
Access, view, and edit all the deals. | |
| Referrals | Access, view, and edit all the deals belonging to the assigned locations. | |
| Referrals | Entire company | Both admins and users can create deals for any location in their company. |
| Referrals | One or more locations | Both admins and users can create deals for the assigned location in their company. |
Referrals user role
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Referrals[3] | Manage referrals. | Create co-sell opportunities for the locations where they're assigned the role. | |
| Referrals | Manage referrals | Can view and register deals for opportunities that are marked as won and eligible for deal registration if they're team member. | |
| Referrals | Manage referrals | Create and manage co-sell opportunities only if they're a part of the team. | Manage Co-sell opportunities. |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
The following table shows the scope for Referrals users.
| Workspace | Scope | What you can do |
|---|---|---|
| Referrals[3] |
Access, view, and edit all the deals belonging to the assigned locations if they're part of the team. | |
| Referrals | Access, view, and edit all the deals only if they're a part of the team. | |
| Referrals | Entire company | Both admins and users can create deals for any location in their company. |
| Referrals | One or more locations | Both admins and users can create deals for the assigned location in their company. |
Report viewer role
This role is available to Partners enrolled in several different programs. The Report viewer role grants users access to perform several key actions in the Insights workspace.
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Cloud Product Performance | Access to data reports except for revenue, customer, and employee personal data for all reporting datasets related to the usage telemetry and revenue of products in all cloud solution areas. |
Sales agent role
This role is available to Partners enrolled in Cloud Solution Provider program (Direct Bill and Indirect Providers only). The Sales agent role grants users access to perform several key actions in the Accounts Settings, Customers, Pricing, and Referrals workspaces. You can also assign this role to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Enroll a value-added reseller. | |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Manage subscriptions. | |
| Customer | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Add device list to the Partner Center. | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Request a partnership with an Indirect reseller. | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Request a relationship with a customer. | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View the customer agreement. | |
| Pricing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View pricing and offers. | |
| Referrals | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Manage customer leads. | |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
Security administrator role
This role is an administrative role available to Partners enrolled in Cloud Solution Provider program (Direct Bill and Indirect Providers only). The Security administrator role grants users access to perform several key actions in the Security workspace. You can also assign this role to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Security | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | Take action on Security posture. |
Security reader role
This role is available to Partners enrolled in Cloud Solution Provider program (Direct Bill and Indirect Providers only). The Security reader role grants users access to perform several key actions in the Security workspace. You can also assign this role to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Security | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View Security posture. |
Support request admin role
This role is available to Partners enrolled in several programs. The Support request admin role grants users access to perform several key actions in the Help + Support workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | View and manage all partner support requests created by yourself and others in your organization. | View support requests. |
User management admin role
This role is available to Partners enrolled in Microsoft AI Cloud Partner Program and Cloud Solution Provider program. The User management admin role grants users access to perform several key actions in the Benefits and Customers workspaces. You can also assign this role to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Benefits | View, create, and manage users. | Manage Microsoft AI Cloud Partner Program membership and your company. | Manage your Microsoft AI Cloud Partner Program membership benefits and offers in Partner Center. |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP). | View all partner profiles. | |
| Help + support[2] | The level of help and support the user creates, views, accesses, or provides. | Create support requests for Partner Center. View partner support requests that you create. |
Compliance admin role
This role intended to support partners with managing compliance-related matters. All Microsoft AI Cloud Partner Program partners and Cloud Solution Provider (CSP) direct-bill, indirect provider, and indirect reseller partners should have a compliance admin assigned to their Partner Center account.
To learn more, see Compliance admin role in Partner Center.
Footnotes
(1) If the user is an admin for incentives, they have full access to that workspace. If the user only needs access to a specific location, you must manually add the user role to that location. This step helps ensure that the user doesn't have access to the whole account, but rather only to a location.
(2) The full list of User Roles in the Help + support workspace, with the level of access: Create support requests for Partner Center and View partner support requests that you create are:
Billing admin
Global admin
Incentives admin
Microsoft AI Cloud Partner Program - Partner Admin
Referrals admin
*Sales agent
Business profile admin
Helpdesk agent
Incentives user
Referrals user
User management admin
*The "Sales agent" role is visible in Partner Center user management only for tier one and tier two indirect providers.
(3) If the user is an admin for referrals, they have full access to that workspace. If the user only needs access to a specific location, you must manually add the user role to that location. This step helps ensure that the user doesn't have access to the whole account but rather only to a location.
(4) If a guest user needs to access, view, or manage an account, they must have an admin role. For a Microsoft AI Cloud Partner Program account, a guest user must have the Global admin or Microsoft AI Cloud Partner Program Partner Admin role. Otherwise, they see the message, Access denied. Contact your company's global admin and ask them to grant you the appropriate access permissions.