Chat now with support
Chat with Support

Quadrotech Nova Current - User Guide

Delegation & Policy Control Reporting Tenant Management System Settings About

SharePoint API permissions

From August 8 2022, you will need to grant consent to new API permissions to avoid losing access to some SharePoint data. Consent of the API permissions will depend on the Azure application you are using. Click here to learn more on certificate based authentication.

All users using the Azure application 'Nova Read-Only Access' must grant consent to the following API permissions:

·Sites.FullControl.All

·User.ReadWrite.All

 

Users using the Azure application 'SoftwareONE Cloud Insider - Read Only' must grant consent to the above two API permissions, as well as the following permission:

·User.Read.All

How to add new users

New users can be added to tenants that you have access so that they can have access to Nova features and services. This is performed in TMS (the Tenant Management System).

These are the steps that you should take:

1.Login to TMS using an account with the System Administrator role.

2.Locate the tenant / container where you want to add a new user and click on it (for example, I could click on ‘Software training'.)

TMS-Org

3.Then click on ‘Users'

Click-on-Users-tab

 
You will be shown a list of users who are already associated / invited / active in your chosen tenant. On the ‘invitations' tab,  you can invite a new user. Enter their email address, choose appropriate roles, and click on ‘Invite'.

This sends an invitation to that user via email to join the tenant / container, which the user must accept.

Once accepted the user will appear on the list of users. Whilst you wait for them to accept, you can see them on the invitations tab.

Once they accept, they are then associated (or linked) to that container / tenant and have a particular role with associated capabilities within that tenant.

If a user has access to multiple container / tenants then they should use the Persona menu to switch to different tenants:

persona-menu

To learn more about the Persona menu, see this section.

Nova remembers which tenant and role a user was last using, so the next time that user logs into Nova it takes the user back to the same place. This happens across browsers, and across sessions.

 

What is an association?

In the above description we have mentioned ‘association' several times, this is essentially a link between your user account, and a tenant, via a particular role. In some organizations there is a one-to-one link, in other organizations a single user might have access to multiple Office 365 tenants. It is also possible for the same user to have different access levels in different organizations. In other words they would have different roles. Let us say we have multiple tenants in an organization, as shown below:

TMS-Org

 

An account, can have different roles in different tenants in this structure.

users-on-software-training-tenant

 

Users-on-Staging-tenant

And in fact might not have access to certain tenants in the structure.

Removing a user

To see how to from your tenant, see this section.

Adding additional service accounts

Microsoft Office 365 implements a series of throttling policies on Office 365 tenants that can inhibit the collection of reporting data for Nova customers.

In order to improve the reliability and speed of the data collection process, we recommend that Office 365 tenants with more than 10,000 users take advantage of our Multiple Service account feature.

By adding multiple Nova service accounts, you will help ensure that reporting data is updated in a timely manner without impacting your Office 365 tenant. These service accounts do not require a Microsoft Office 365  which means that taking advantage of this feature does not add any cost to your Office 365 subscription.

Getting started

Before we begin, you must create some additional accounts within your Office 365 environment with the correct permissions.

For simplicity, we recommend that these service accounts are named as follows:

NovaReporting@<domain>.onmicrosoft.com

NovaReporting1@<domain>.onmicrosoft.com

NovaReporting2@<domain>.onmicrosoft.com

etc

To create the service accounts for reporting, please follow the steps outlined at this section.

To create the service accounts for DPC, please follow the steps outlined at this section.

info

NOTE: If you are using the SharePoint Online Reports module, you will also need to give this account the correct permissions to the SharePoint Online Site Collections you are reporting on – you can find the steps to do so at this section.

Alternatively, you can create a Security Group in Office 365 with these correct permissions and add the Nova Service accounts into this security group.

Adding these accounts to Nova

To add an additional service account,

1.Log in to your tenant as an administrator at https://account.quadro.tech

2.Go to the My Organization tab

3.Select your tenant

4.Click ‘add account'.
TMS1

 

An expansive section on service accounts can be found here.

Remove a user from your tenant

From time to time it might be necessary to remove a user from your tenant. We also call this removing the user association. It is easy to do by following these steps:

1.Login to TMS using an account with the System Administrator role.

2.Locate the tenant/container which you want to manage and select it.

3.Then click Users.

You will be shown a list of users who are already associated / invited / active in your chosen tenant.

Remove-user-from-tenant-1-1536x492

Click on the icon to the right of the user and their roles, and it will remove their association with this tenant.

info

NOTE: There is no confirmation dialog and the user will be removed immediately.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating