How to Manage User Permissions on SpinOne for M365
Initially, only the Root Administrator of the SpinOne account will have access to the SpinOne platform. However, it is extremely easy to delegate customized access to other users.
In this article, we will discuss how to:
- Assign additional permissions to other users
- Understand what each permission set entails
Assigning Additional Permissions to Other Users
To get started, log in to your SpinOne account. You should first see your SpinOne Dashboard…
Next, head to the Users section from the left panel…
Now, select the User to whom you want to assign permissions…
From the Permissions tab, you can see all of the available permissions that can be toggled on for this User…
Now you can easily customize the permissions set for this user.
If you would like to update permissions for ALL users, or for a certain Security Group, select Permissions from the Settings on the top right of the current screen.
From here, you are able to change the permissions for the selected Users or Security Group…
Understanding What Each Permission Set Entails
It is important to understand what each permission set entails in order to correctly delegate access to anyone needed.
You can delegate an end-user with the ability to simply login, and manage their own data by providing the following permissions:
- Login – Allows the User to login to the SpinOne platform
- Restore – Allows the user to restore their own data
- Download – Allows the user to download their own data
In order to provide Administrative privileges, first, ensure that the User is Able to permissions are enabled and then proceed to provide further permissions…
Start off by enabling the Grant Admin Permissions toggle. Once this has been enabled, this User is automatically marked as an administrator on the SpinOne console. Enabling this will now allow you to customize the rest of the administrative permissions. The administrator will by default be able to view all Users, unless the User is restricted to a certain Security Group.
Lastly, let’s go through what each permission means:
- Activate Entities – Ability to onboard Users, Shared Drives and Spaces
- Manage Global Admin – Ability to see and manage the Root Administrator User
- Change Account and User Settings – access to the Account Settings to manage automation, reporting, backup frequency, etc.
- Manage data (browse, read) – Ability to view titles of User data such as Exchange Online and OneDrive
- Browse Linked Accounts – Ability to access other Spin Accounts that are linked together
- Archive Entities – Ability to Archive users on SpinOne
- Billing – Ability to add licenses, change plans and manage payment
- Restore – Ability to launch restores of accessible user data (includes cross-user restoration)
- Download – Ability to export backed up data to a local device
- Preview Item – Ability to preview emails on SpinOne
- Delete users – Ability to remove a User from SpinOne
Once these permissions have been updated, the user can access the SpinOne platform in the same manner as the Root Administrator: initially by OAuth (using “Sign in With Microsoft”), and then with the ability to create their own unique SpinOne credentials.
If you would like an administrator to only have access to Users from a certain Security Group, restrict their access to those SGs by following these steps:
- Select Users on the lefthand toolbar and then select Settings on the top right corner of the page and click Sec. Groups Management…
- Select an Security Group and then search for the User(s) that you want to be an Admin for this SG.
- Once you have identified a User, click the + sign on the far right of the page…
- Now, this user account can only access and manage (based on their permissions) users from the specified Security Group…
You can add more administrators to the same OU or remove these administrators as necessary.
Was this helpful?
Yes 
No