{"id":167,"date":"2020-02-17T16:32:37","date_gmt":"2020-02-17T15:32:37","guid":{"rendered":"https:\/\/help.metashare.com\/metashare-help-faq-what-accounts-and-permissions-are-required-to-manage-metashare\/"},"modified":"2025-09-15T14:42:43","modified_gmt":"2025-09-15T12:42:43","slug":"accounts-and-permissions-required-to-manage-metashare","status":"publish","type":"page","link":"https:\/\/help.metashare.com\/en\/metashare\/get-started\/setup\/accounts-and-permissions-required-to-manage-metashare\/","title":{"rendered":"Accounts and permissions required to manage MetaShare"},"content":{"rendered":"\n<p>MetaShare activation, configuration and administration could all be done by the same user-account but our recommendation is to use 3 different accounts. MetaShare&#8217;s activation and administration are normally done by system accounts. MetaShare configuration can however be done by several users with different privileges.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Activation of MetaShare<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>The account that activates MetaShare must be a Global Administrator in a Microsoft 365 tenant.<\/li>\n\n\n\n<li>Observe that a Global Administrative account does not have, by definition, access-rights to all sites\/workspaces and their documents. Such an account can however always grant itself permissions to any site\/workspace. Click <a href=\"https:\/\/help.metashare.com\/en\/get-started\/how-to-activate-metashare\/\">here<\/a> to get instructions for the activation of MetaShare.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Configuration of MetaShare<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>After MetaShare has been activated, you can configure\/manage MetaShare with a normal Microsoft 365 user-account.&nbsp;Click&nbsp;<a href=\"https:\/\/help.metashare.com\/en\/faq\/how-do-i-configure-metashare\/\">here<\/a>&nbsp;to see how to&nbsp;configure MetaShare.<\/li>\n\n\n\n<li>To be able to access and configure MetaShare, these privileges need to be assigned:\n<ol style=\"list-style-type:lower-alpha\" class=\"wp-block-list\">\n<li><strong>Access to SharePoint&#8217;s root-site<br><\/strong>To be able to access MetaShare, all users need a minimum of &#8220;read&#8221; permissions on SharePoint&#8217;s root-site, https:\/\/[tenant&#8217;s-name].sharepoint.com.<\/li>\n\n\n\n<li><strong>MetaShare roles in Azure<br><\/strong>In order to <a href=\"https:\/\/help.metashare.com\/en\/faq\/how-do-i-configure-metashare\/\">configure MetaShare<\/a>, <a href=\"https:\/\/help.metashare.com\/en\/usermanual\/how-to-create-a-workspace\/\">create MetaShare workspaces<\/a> and get MetaShare to be <a href=\"https:\/\/help.metashare.com\/en\/faq\/how-do-i-pin-metashare-to-the-app-launcher-in-office-365\/\">displayed in Microsoft 365 app launcher<\/a>, follow these&nbsp;<a href=\"https:\/\/help.metashare.com\/en\/get-started\/how-to-assign-metashares-roles-in-azure\/\">instructions<\/a>&nbsp;to assign these&nbsp;roles in Azure:<br> <figure><img loading=\"lazy\" decoding=\"async\" width=\"494\" height=\"138\" class=\"alignnone\" src=\"https:\/\/help.metashare.com\/wp-content\/uploads\/image-353.png\" alt=\"A user that has been assigned all MetaShare roles\"><\/figure> Note that the user that activated MetaShare in your Microsoft 365 tenant is automatically assigned the necessary roles during the sign-up process.<\/li>\n\n\n\n<li><strong>Term store administrator<\/strong><br>To be able to manage MetaShare&#8217;s taxonomy (term sets and terms) in SharePoint&#8217;s <a href=\"https:\/\/help.metashare.com\/en\/adminmanual\/how-to-access-the-term-store\">Term store<\/a>, assign the users to the &#8220;Contributors&#8221; or &#8220;Group Managers&#8221; group in MetaShare&#8217;s&nbsp;term set groups. When MetaShare is activated, one term set group named &#8220;MetaShare&#8221; is created. Delegated administration of MetaShare&#8217;s taxonomy is managed by splitting MetaShare&#8217;s term sets into different term set groups and by assigning different users to the different term set groups &#8220;Contributors&#8221;.<br> <figure><img loading=\"lazy\" decoding=\"async\" width=\"913\" height=\"558\" class=\"alignnone\" src=\"https:\/\/help.metashare.com\/wp-content\/uploads\/image-166.png\" alt=\"A term set group's administrators\"><\/figure> <\/li>\n\n\n\n<li><strong>Content type hub administrator<\/strong><br>To be able to create MetaShare&#8217;s document metadata (<a href=\"https:\/\/help.metashare.com\/en\/adminmanual\/how-to-create-a-site-column\">site columns<\/a> and <a href=\"https:\/\/help.metashare.com\/en\/adminmanual\/how-to-create-a-site-content-type\">site content types<\/a>), the users needs &#8220;Full Control&#8221; permissions on&nbsp;<a href=\"https:\/\/help.metashare.com\/en\/get-started\/definition-of-columns-and-content-types\/#definition-of-the-content-type-hub\">SharePoint&#8217;s content type hub<\/a>&nbsp;(at least the person that sets up the initial structure needs this privilege).<br>If users are only&nbsp;to configure MetaShare and do not need to modify MetaShare&#8217;s document metadata, the users&nbsp;only&nbsp;needs&nbsp;&#8220;Read&#8221; permissions&nbsp;on the hub. If the logged in users do not have access to the hub, a simple way to grant the permissions is to click on any of the workspace configurations in <a href=\"https:\/\/app.metashare.com\/#\/settings\/workspacecategories\/\" target=\"_blank\" rel=\"noreferrer noopener\">MetaShare settings<\/a> and to use one of the links that MetaShare provides in the missing permissions notification page&#8217;s instructions:<img loading=\"lazy\" decoding=\"async\" width=\"660\" height=\"330\" class=\"alignnone\" src=\"https:\/\/help.metashare.com\/wp-content\/uploads\/image-364.png\" alt=\"User lacks permissions in SharePoint's content type hub\" style=\"font-size: inherit\"> <\/li>\n\n\n\n<li><strong>MetaShare document template administrator<\/strong><br>In order to <a href=\"https:\/\/help.metashare.com\/en\/adminmanual\/how-to-manage-metashares-document-templates\">manage MetaShare&#8217;s document templates<\/a>, a workspace for the document templates needs to be created, according to <a href=\"https:\/\/help.metashare.com\/en\/adminmanual\/how-to-create-and-define-the-document-templates-library\/#how-to-create-the-document-templates-library\">these instructions<\/a>. The administrator of this library needs &#8220;Full Control&#8221; permissions on&nbsp;the document library and&nbsp;all users that are to be able to create documents based on these document templates need to have &#8220;Read&#8221; permissions on the library. <\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Administration of MetaShare<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>By default, the account used when activating MetaShare is defined as the <a href=\"https:\/\/help.metashare.com\/en\/metashare\/adminmanual\/settings\/security-settings\/\">MetaShare&#8217;s site collection administrator account<\/a>. If needed, it can be replaced with another account.<\/li>\n\n\n\n<li>The MetaShare administrator account will be granted full access-rights in all workspaces (added as Site Collection Administrator to the site collections MetaShare creates)<\/li>\n\n\n\n<li>Recommendations\/prerequisites for the account:\n<ol style=\"list-style-type:lower-alpha\" class=\"wp-block-list\">\n<li>It should therefore preferably be a system account (not a normal user account).<\/li>\n\n\n\n<li>It should be a SharePoint Service Administrator (no SharePoint licence needed).<\/li>\n\n\n\n<li>As the account in some cases will be shown to the end-users, e.g. when unexpected errors occur, enabling end-users to send e-mails to the account, the account needs a Microsoft Exchange Online license and the account\u2019s e-mail should also be monitored by an administrator. <\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Using MetaShare<\/h2>\n\n\n\n<p>For the end-users of MetaShare, the requirements are:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>The user need a Microsoft 365 account. See&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/metashare.com\/en\/app\/about\/service-description\/\" target=\"_blank\">MetaShare&#8217;s Service Description<\/a>, for a list of all supported Microsoft 365 subscriptions.&nbsp;If you are unsure which subscription your users have, <a rel=\"noreferrer noopener\" href=\"https:\/\/portal.office.com\/account\/#subscriptions\" target=\"_blank\">click&nbsp;here<\/a>.<\/li>\n\n\n\n<li>Have a minimum of &#8220;read&#8221; permissions on SharePoint&#8217;s root-site, https:\/\/[your tenant&#8217;s name].sharepoint.com.<\/li>\n\n\n\n<li>Are <a href=\"https:\/\/help.metashare.com\/en\/get-started\/how-to-assign-metashares-roles-in-azure\/\">assigned the &#8220;MetaShare User&#8221; role<\/a>, for MetaShare to be displayed in their Microsoft 365 app launcher.<\/li>\n\n\n\n<li>Have been <a href=\"https:\/\/help.metashare.com\/en\/usermanual\/how-to-view-set-a-workspaces-permissions\/\">assigned permissions on one or more workspaces<\/a>, else <a href=\"https:\/\/help.metashare.com\/en\/metashare\/usermanual\/introduction\/search-for-workspaces\/\">MetaShare&#8217;s Search for workspaces page<\/a> will not show any workspaces.<\/li>\n\n\n\n<li>Have &#8220;Read&#8221; permissions on the <a href=\"https:\/\/help.metashare.com\/en\/metashare\/get-started\/document-templates\/how-to-create-and-define-metashares-document-templates-library\/\">document templates library<\/a> (in order for them to be able to <a href=\"https:\/\/help.metashare.com\/en\/usermanual\/how-to-create-a-document\">create documents<\/a>).<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>MetaShare activation, configuration and administration could all be done by the same user-account but our recommendation is to use 3 different accounts. MetaShare&#8217;s activation and administration are normally done by system accounts. MetaShare configuration can &#8230; <a title=\"Accounts and permissions required to manage MetaShare\" class=\"read-more\" href=\"https:\/\/help.metashare.com\/en\/metashare\/get-started\/setup\/accounts-and-permissions-required-to-manage-metashare\/\" aria-label=\"Read more about Accounts and permissions required to manage MetaShare\">Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"parent":10703,"menu_order":2,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":{"0":"post-167","1":"page","2":"type-page","3":"status-publish","5":"no-featured-image-padding"},"_links":{"self":[{"href":"https:\/\/help.metashare.com\/en\/wp-json\/wp\/v2\/pages\/167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/help.metashare.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/help.metashare.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/help.metashare.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/help.metashare.com\/en\/wp-json\/wp\/v2\/comments?post=167"}],"version-history":[{"count":27,"href":"https:\/\/help.metashare.com\/en\/wp-json\/wp\/v2\/pages\/167\/revisions"}],"predecessor-version":[{"id":12357,"href":"https:\/\/help.metashare.com\/en\/wp-json\/wp\/v2\/pages\/167\/revisions\/12357"}],"up":[{"embeddable":true,"href":"https:\/\/help.metashare.com\/en\/wp-json\/wp\/v2\/pages\/10703"}],"wp:attachment":[{"href":"https:\/\/help.metashare.com\/en\/wp-json\/wp\/v2\/media?parent=167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}