Roles, permissions, and workspace access for users
Appropriate roles: Account admin | Global admin | User management admin
You determine the access your users have to Partner Center by the roles you assign to them. Each program has roles specific to the business it relates to. For example, if your business is a Cloud Solution Provider (CSP) business, your users need roles specific to the CSP program, not just standard Microsoft Entra tenant management roles such as global admin.
The tables in this article are listed per Partner Center user role. The tables list the permissions granted by those roles, and the workspaces those roles have access to.
This article doesn't describe all roles, such as roles in the Microsoft marketplaces and roles with privileges for various granular delegated admin privileges (GDAP) capabilities.
Note
Role assignments or changes done in Azure portal can take up to one hour to appear in Partner Center.
Editing user permissions isn't supported in national clouds, including Microsoft Cloud for US Government and Microsoft Azure and Microsoft 365 operated by 21Vianet in China.
Assign user roles
Partner Center access is role-based. To work in Partner Center, a new user must have one or more assigned roles. A user might need to be assigned roles in any or all these categories: Cloud Solution Provider (CSP), Microsoft Entra tenant, or non-Microsoft Entra company.
- Microsoft Entra tenant roles include global admin, user admin, and CSP roles.
- Non-Azure-AD roles are roles that don't manage the tenant. They include business profile admin, referral admin, incentive admin, incentive user, and Microsoft AI Cloud Partner Program (formerly the Microsoft Partner Network) partner admin.
Assigning appropriate roles to new users ensures that they can view the information and perform the tasks they need to work effectively, without granting them unnecessary permissions.
Important
Users must be listed in your tenant to access Partner Center. Role assignments provide additional access.
Users who need changes to their assigned roles can request changes from a Global admin. They can find the right admins by going to My access and opening the workspace they need access to.
Account admin role
This role is an administrative role available to Partners enrolled in Microsoft AI Cloud Partner Program. The Account admin role grants users access to perform several key actions in the Account Settings workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Add locations | Manage locations |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Assign roles for users in tenant to non-Azure-AD roles | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Enroll locations into programs | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Manage profiles related to the accounts you're the admin for | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Admin agent role
This role is available to Partners enrolled in Cloud Solution Provider program. The Admin agent role grants users access to perform several key actions in the Account Settings, Billing, Customers, and Pricing workspace. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Add device list to the Partner Center | |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Register a value-added reseller | |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Subscription management | |
| Billing | View and manage Azure spending budgets | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Set an Azure spending budget for customers |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Administer on behalf of a customer | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Create and apply profiles to devices | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request delegated administrator privileges | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request a partnership with an Indirect reseller | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request a relationship with a customer | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View the customer agreement | |
| Customers | The level of help and support the user can create, view, access, or provide. | Service health and service requests for customers | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Pricing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View pricing and offers |
Billing admin role
This role is available to Partners enrolled in Cloud Solution Provider program. The Billing admin role grants users access to perform several key actions in the Billing workspace. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Billing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Manage billing issues on behalf of customers | Provide billing support for your customers and help answer their billing questions |
| Billing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View and manage billing, invoices, and reconciliation files | Read your bill |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Business profile admin role
This role is available to Partners enrolled in Microsoft AI Cloud Partner Program. The Business profile admin role grants users access to perform several key actions in the Referrals workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Referrals[3] See Scope of referral roles in this article. |
Manage referrals | Create and manage business profiles | Manage business profiles |
Co-sell Solution admin role
This role is available to Partners enrolled in Microsoft AI Cloud Partner Program. The Co-sell Solution admin role grants users access to perform several key actions in the Referrals workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Referrals[3] See Scope of referral roles in this article. |
Manage referrals | Can access Co-sell solution tab from Referrals workspace to add or update the listings/documents and contacts for solutions that are already live in the marketplace storefront. | Configure Co-sell solution |
Default user role
This role is available to Partners enrolled in any program. The Default user role grants the least privilege across all the roles. This is assigned by default to all users in the Microsoft Entra ID tenant who login to Partner Center.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View my learning profile | Link or unlink a Learn profile to a PartnerID |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View my profile | Reset your password |
Executive report viewer role
This role is available to Partners enrolled in the Microsoft AI Cloud Partner Program. The Executive report viewer role grants users access to perform several key actions in the Insights workspace.
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Cloud Product Performance | Access to all reporting datasets related to the usage telemetry and revenue of Products in all cloud solution areas | Overview dashboard reports available in Partner Center Insights |
| Insights | View Partner Center Insights data | Surface Insights | Access to all Surface Insights reports at partner global account (PGA) level |
Global admin role
This is an administrative role available to Partners enrolled in many different programs. The Global admin role grants users access to perform several key actions in the Account Settings, Billing, Pricing, and Insights workspaces. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Control panel vendor | View and manage any of your users who need access to Control Panel vendor (CPV) capabilities | |
| Account settings | Control panel vendor | View and manage your CPV profile | Enroll as a Control Panel Vendor to help integrate CSP partner systems with Partner Center APIs |
| Account settings | Manage Partner Center (Microsoft Entra ID and CSP) | Can access all Microsoft account/services with full privileges | Manage your Partner Center account |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Cancel Azure subscription | |
| Account settings | Manage users in Partner Center (Microsoft Entra ID and CSP) | View, create, and manage all partner users | Create user accounts and assign roles. Only a Global admin can reset a password for a global admin. |
| Billing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View and manage billing, invoices, and reconciliation files | Read your bill |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Pricing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View agreements, price lists, and offers |
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Referral Insights | Access to all Referral Insights reports at partner global account (PGA) level |
Guest user role
A user can be added as a guest on the Microsoft Entra tenant. The Guest user's access to Partner Center capabilities depends on the role the admin assigns them on the Microsoft Entra tenant.
| User Roles | Guest user[4] |
|---|---|
| Business profile admin | Guest user |
| Microsoft AI Cloud Partner Program Partner Admin | Guest user |
| Referrals admin | Guest user |
Note
To access, view, or manage an account, a guest user must be assigned an admin role. For a Microsoft AI Cloud Partner Program account, a guest user must have the Global admin or Microsoft AI Cloud Partner Program Partner Admin role. (Otherwise, they'll see the message, "Access denied. Please contact your company's global admin and ask them to grant you the appropriate access permissions.")
Helpdesk agent role
This role is available to Partners enrolled in Cloud Solution Provider program. The Helpdesk agent role grants users access to perform several key actions in the Customers workspace. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Customers | The level of help and support the user can create, view, access, or provide. | Search for and view a customer | |
| Customers | The level of help and support the user can create, view, access, or provide. | Edit customer details | |
| Customers | The level of help and support the user can create, view, access, or provide. | Help resolve customer issues with billing or subscription management | |
| Customers | The level of help and support the user can create, view, access, or provide. | Request support on behalf of customers | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Incentives admin role
This is an administrative role available to Partners enrolled in any program. The Incentives admin role grants incentives. It grants users access to perform several key actions in the Incentives workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Incentives[1] | Manage incentives | Initiates and manages incentives | Use these resources to help you get started with incentives |
| Incentives | Manage incentives | Can view and edit all aspects of incentives programs | |
| Incentives | Manage incentives | Can view and edit bank and tax details | |
| Incentives | Manage incentives | View rebate and co-op earnings | |
| Incentives | Manage incentives | Dispute incentives payments | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Incentives user role
This is a role available to Partners enrolled in any program that grants incentives. The Incentives user role grants users access to perform several key actions in the Incentives workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Incentives[1] | Manage incentives | Can view incentives programs | |
| Incentives | Manage incentives | Can view and initiate incentives claims | |
| Incentives | Manage incentives | View rebate and co-op earnings | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Microsoft AI Cloud Partner Program partner admin role
This is an administrative role available to Partners enrolled in Microsoft AI Cloud Partner Program. The Microsoft AI Cloud Partner Program partner admin role grants users access to perform several key actions in the Account Settings, Benefits, Membership and Insights workspaces.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | Export learning users | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | View other user roles within company, but can't assign roles | |
| Account settings | Manage Microsoft AI Cloud Partner Program membership and your company | View legal, company, business, and Microsoft AI Cloud Partner Program profiles | Verify your company profile |
| Benefits | Manage Microsoft AI Cloud Partner Program membership and your company | View and manage benefits | |
| Insights | Manage Microsoft AI Cloud Partner Program membership and your company | View customer data analytics | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | Can work in the Voucher Validation tool | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View and purchase Microsoft AI Cloud Partner Program offers | Buy or renew a Microsoft Action Pack subscription or silver and gold competencies |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View, create, and manage partner service requests | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View Microsoft AI Cloud Partner Program offers order history and invoices | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View partner contribution indicator data | |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View Solutions partner designations | Introduction to Solutions partner designations |
| Membership | Manage Microsoft AI Cloud Partner Program membership and your company | View user details and their skills data | Skills report in Partner Center |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Membership | View membership analytics related to all Partner Programs |
Referrals admin role
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Referrals[3] | Manage referrals | Can assign team members for a deal | |
| Referrals | Manage referrals | Can view and edit all the co-sell opportunities and leads | |
| Referrals | Manage referrals | Can view and edit business profiles | |
| Referrals | Manage referrals | Can view and register deals for opportunities that are marked as won and eligible for deal registration | |
| Referrals | Manage referrals | Create and manage everything under Referrals tab in Partner Center | Manage Co-sell opportunities |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
|
| Insights (area: Referral Insights) | View Partner Center Insights data | Access to all Referral Insights reports at partner global account (PGA) level |
The following table shows the scope for Referrals admins.
| Workspace | Scope | What you can do |
|---|---|---|
| Referrals[3] |
Referral admin has access to view and edit all the deals. | |
| Referrals | Referral admin has access to view and edit all the deals belonging to the assigned locations. | |
| Referrals | Entire company | Both admins and users have access to create deals for any location in their company. |
| Referrals | One or more locations | Both admins and users have access to create deals for the assigned location in their company. |
Referrals user role
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Referrals[3] | Manage referrals | Can create co-sell opportunities for the locations where they're assigned the role. | |
| Referrals | Manage referrals | Can view and register deals for opportunities that are marked as won and eligible for deal registration if they're team member. | |
| Referrals | Manage referrals | Create and manage co-sell opportunities only if they're a part of the team | Manage Co-sell opportunities |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
The following table shows the scope for Referrals users.
| Workspace | Scope | What you can do |
|---|---|---|
| Referrals[3] |
Referrals users have access to view and edit all the deals belonging to the assigned locations if they're part of the team. | |
| Referrals | Referral users have access to view and edit all the deals only if they're a part of the team. | |
| Referrals | Entire company | Both admins and users have access to create deals for any location in their company. |
| Referrals | One or more locations | Both admins and users have access to create deals for the assigned location in their company. |
Report viewer role
This role is available to Partners enrolled in several different programs. The Report viewer role grants users access to perform several key actions in the Insights workspace.
| Workspace | Description | Area | Level of access | Learn more |
|---|---|---|---|---|
| Insights | View Partner Center Insights data | Cloud Product Performance | Access to data reports with exception of revenue and customer and employee personal data for all reporting datasets related to the usage telemetry and revenue of Products in all cloud solution areas |
Sales agent role
This role is available to Partners enrolled in Cloud Solution Provider program (Direct Bill and Indirect Providers only). The Sales agent role grants users access to perform several key actions in the Accounts Settings, Customers, Pricing, and Referrals workspaces. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Enroll a value-added reseller | |
| Account settings | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Subscription management | |
| Customer | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Add device list to the Partner Center | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request a partnership with an Indirect reseller | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Request a relationship with a customer | |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View the customer agreement | |
| Pricing | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View pricing and offers | |
| Referrals | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Manage customer leads | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Security administrator role
This is an administrative role available to Partners enrolled in Cloud Solution Provider program (Direct Bill and Indirect Providers only). The Security administrator role grants users access to perform several key actions in the Security workspace. This can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Security | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | Take action on Security posture |
Security reader role
This is a role available to Partners enrolled in Cloud Solution Provider program (Direct Bill and Indirect Providers only). The Security reader role grants users access to perform several key actions in the Security workspace. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Security | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View Security posture |
Support request admin role
This is a role available to Partners enrolled in several programs. The Support request admin role grants users access to perform several key actions in the Help + Support workspace.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | View and manage all partner support requests created by yourself and others in your organization | View support requests |
User management admin role
This is a role available to Partners enrolled in Microsoft AI Cloud Partner Program and Cloud Solution Provider program. The User management admin role grants users access to perform several key actions in the Benefits and Customers workspaces. This role can also be assigned to users from Azure portal.
| Workspace | Description | Level of access | Learn more |
|---|---|---|---|
| Benefits | View, create, and manage users | Manage Microsoft AI Cloud Partner Program membership and your company | Manage your Microsoft AI Cloud Partner Program membership benefits and offers in Partner Center |
| Customers | Manage CSP commercial transactions in Partner Center (Microsoft Entra ID and CSP) | View all partner profiles | |
| Help + support[2] | The level of help and support the user can create, view, access, or provide. | Create support requests for Partner Center. View partner support requests that you create. |
Footnotes
(1) If the user is an admin for incentives, they have full access to that workspace. If the user only needs access to a specific location, then the user role needs to be manually added to that location. This ensures the user doesn't have access to the whole account, but rather only to a location.
(2) The full list of User Roles in the Help + support workspace, with the level of access: Create support requests for Partner Center and View partner support requests that you create are:
Billing admin
Global admin
Incentives admin
Microsoft AI Cloud Partner Program - Partner Admin
Referrals admin
*Sales agent
Business profile admin
Helpdesk agent
Incentives user
Referrals user
User management admin
*The "Sales agent" role is visible in Partner Center user management only for tier 1 and tier 2 indirect providers.
(3) If the user is an admin for referrals, they have full access to that workspace. If the user only needs access to a specific location, then the user role must be manually added to that location. This ensures the user doesn't have access to the whole account but rather only to a location.
(4) To access, view, or manage an account, a guest user must be assigned an admin role. For a Microsoft AI Cloud Partner Program account, a guest user must have the Global admin or Microsoft AI Cloud Partner Program Partner Admin role. (Otherwise, they'll see the message, "Access denied. Contact your company's global admin and ask them to grant you the appropriate access permissions.")
Related content
Read the following articles for more information about roles and permissions.
- Assign user roles and permissions for Microsoft marketplace
- Set roles or custom permissions for account users for Windows and Xbox
- Create user accounts, assign roles, and permissions
- Verify your account information when you enroll in a new Partner Center program
- Find your workspaces, roles, and admins