Merge pull request #27206 from MicrosoftDocs/main

Publish main to live, 12/17, 11:00 AM IST

Author: aditisrivastava07

microsoft-365/backup/backup-faq.md

@@ -88,20 +88,12 @@ When a site is removed from the backup policy, the backup of the SharePoint site
 
 #### How can I restore the OneDrive account or Exchange mailbox for a user who is deleted from Microsoft Entra ID (formerly Azure Active Directory)?
 
-> [!NOTE]
-> Deleted users will appear as "–" in the user interface because the user does not exist in the tenancy. However, the backups and associated restore points will be retained for the full 365-day retention period from when a given restore point was originally created.
-
 If the user has been deleted within the past 30 days, the best option is to restore the user based on instructions found at [Restore a user in the Microsoft 365 admin center](/microsoft-365/admin/add-users/restore-user). Once the user is reconstituted, the name will reappear in the Backup tool restore experience, and the rest of the experience will work as normal.
 
 For OneDrive, you can restore the OneDrive to the original URL or a new URL. At that time, the OneDrive is in an "orphaned" state. To connect the OneDrive to a user, see [Fix site user ID mismatch in SharePoint or OneDrive](/sharepoint/troubleshoot/sharing-and-permissions/fix-site-user-id-mismatch).
 
-For Exchange, if the user account is currently or permanently deleted, Microsoft 365 Backup retains the inactive mailbox for the duration of the backup policy. To recover and restore the inactive mailbox, see the following guidance:
-
-- [Recover an inactive mailbox](/purview/recover-an-inactive-mailbox)
-- [Restore an inactive mailbox](/purview/restore-an-inactive-mailbox)
-
-Once an inactive mailbox is recovered and restored to a new mailbox, the new mailbox must be added to the backup policy if desired.
+For Exchange, if the user account is permanently deleted, Microsoft 365 Backup retains the inactive mailbox for the duration of the backup policy. To recover the inactive mailbox, follow the guidance at [Recover an inactive mailbox](/purview/recover-an-inactive-mailbox) to convert the inactive mailbox to a new, active mailbox. Once the inactive mailbox is recovered, remove the deleted user from the backup policy and then add the new user to the backup policy to access backups from the recovered mailbox.
 
 <!---
 - For Exchange, a user account will be in a soft-deleted state for 30 days after it's deleted. To restore the user, see [Restore a user in the Microsoft 365 admin center](/microsoft-365/admin/add-users/restore-user). Once you restore the user, you can use the restore feature in Microsoft 365 Backup to restore as usual.
---->
+--->

microsoft-365/commerce/licenses/manage-license-requests.md

@@ -41,7 +41,10 @@ To see and manage license requests, use the **Requests** tab on the **Licensing*
 
 ## Before you begin
 
-You must be at least a User Administrator or a License Administrator to do the tasks in this article. For more information, see [About admin roles](../../admin/add-users/about-admin-roles.md).
+- You must be at least a User Administrator or a License Administrator to do the tasks in this article. For more information, see [About admin roles](../../admin/add-users/about-admin-roles.md).
+- If you're a partner who's an Admin On Behalf Of (AOBO) a customer, you must have a role that's set to Global Administrator in order to do the tasks in this article.
+
+[!INCLUDE [ga-roles-limitation](../../includes/ga-roles-limitation.md)]
 
 ## Use your own request process
 
@@ -81,7 +84,7 @@ When you return to the **Requests** list, you see the message **You're using you
 6. To assign licenses based on group membership, select **Assign license by adding the approved individuals to the following security group**.
    - A grayed-out option typically signifies that the security groups are either unlicensed or not yet configured.
    - For more information about how to assign licenses to a security group, see [Assign licenses to users by group membership using the Microsoft 365 admin center](/entra/identity/users/licensing-admin-center)
-   - When multiple security groups are available, select the one to which you want to assign licenses.     
+   - When multiple security groups are available, select the one to which you want to assign licenses.
 7. In the text box at the bottom of the pane, type a message (optional). The user receives an email containing either the default message or your customized message.
 8. When you're finished, select **Submit**. The details pane shows the details of the request.
 9. Close the details pane. Users receive an email that says their request was approved or denied.
@@ -105,4 +108,4 @@ If you don’t have the authority within your organization to make decisions abo
 [Assign licenses to users](../../admin/manage/assign-licenses-to-users.md) (article)\
 [Move users to a different subscription](../subscriptions/move-users-different-subscription.md) (article)\
 [Buy or remove subscription licenses](buy-licenses.md) (article)\
-[Self-service purchase FAQ](../subscriptions/self-service-purchase-faq.yml)
+[Self-service purchase FAQ](../subscriptions/self-service-purchase-faq.yml) (article)

microsoft-365/commerce/subscriptions/allowselfservicepurchase-powershell.md

@@ -47,6 +47,7 @@ To use the **MSCommerce** PowerShell module, you need:
 - The Global or Billing Administrator role for your tenant to change the **MSCommerce** product policies.
     [!INCLUDE [ga-roles-limitation](../../includes/ga-roles-limitation.md)]
 - The Global reader role for your tenant to see a read-only list of **MSCommerce** product policies.
+- Partners who are Admins On Behalf Of (AOBO) a customer must have a role that's set to Global Administrator in order to manage and disable self-service purchases in the Microsoft 365 admin center and via PowerShell.
 
 ## Get started with the MSCommerce PowerShell module
 

microsoft-365/commerce/subscriptions/manage-self-service-purchases-admins.md

@@ -48,6 +48,9 @@ You can also control whether users in your organization can make purchases or si
 - [Find out what type of billing account you have](../manage-billing-accounts.md#view-my-billing-accounts).
 - If you have a Microsoft Customer Agreement (MCA) billing account type, you must be a Billing account owner or contributor or a Billing profile owner or contributor to do the tasks in this article. For more information about billing account roles, see [Understand your Microsoft business billing account](../manage-billing-accounts.md) and [Manage your Microsoft business billing profiles](../billing-and-payments/manage-billing-profiles.md).
 - If you have a Microsoft Online Services Agreement (MOSA) billing account type, you must be at least a Billing Administrator to do the tasks in this article. For more information, see [About admin roles in the Microsoft 365 admin center](../../admin/add-users/about-admin-roles.md).
+- If you're a partner who's an Admin On Behalf Of (AOBO) a customer, you must have a role that's set to Global Administrator in order to do the tasks in this article.
+
+[!INCLUDE [ga-roles-limitation](../../includes/ga-roles-limitation.md)]
 
 > [!NOTE]
 > If you're the person who signed up for the subscription, you're automatically a Billing account owner.
@@ -71,8 +74,7 @@ We use the directory data to provide the user with a license and to send email a
 [!INCLUDE [office-365-operated-by-21vianet-admin-center-link](../../includes/office-365-operated-by-21vianet-admin-center-link.md)]
 
 1. In the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">Microsoft 365 admin center</a>, go to the **Billing** > <a href="https://go.microsoft.com/fwlink/p/?linkid=842054" target="_blank">Your products</a> page.
-1. Select the **Self-service trials** tab. 
-
+2. Select the **Self-service trials** tab.
 3. To view more details about a subscription, select one from the list.
 
 ## View who has licenses for a self-service purchase or trial subscription
@@ -104,7 +106,7 @@ Both methods let you do the following tasks:
 ### Use the Microsoft 365 admin center to allow or block self-service purchases and trials
 
 > [!NOTE]
-> You must be a Global Administrator to do the following steps.
+> You must be a Global Administrator to do the following steps. Partners who are Admins On Behalf Of (AOBO) a customer must have a role that is set to Global Administrator to do the following steps.
 
 [!INCLUDE [ga-roles-limitation](../../includes/ga-roles-limitation.md)]
 

microsoft-365/commerce/subscriptions/self-service-purchase-faq.yml

@@ -34,6 +34,8 @@ summary: |
   > [!NOTE]
   > Self-service purchase isn't available in India or for government or education customers. Project and Visio aren't available for self-service purchase in Brazil and the Democratic Republic of Congo.
   
+  > [!IMPORTANT]
+  > Self-service purchases and trials can't be completely turned off at the tenant level with a single command. The [AllowSelfServicePurchase](allowselfservicepurchase-powershell.md) policy is managed on a per-product basis. You can only turn off self-services purchases and trials for the entire tenant by turning off each product individually. By default, all new products are set to allow users to make a self-service purchase.
 
 sections:
   - name: Making a self-service purchase
@@ -142,7 +144,19 @@ sections:
 
   - name: Partners
     questions:
+      - question: |
+          Can I disable self-service purchase for all my customers? 
+        answer: |
+          Yes. However, there's no single command to turn off all self-service purchases at the tenant level. Self-service purchases and trials can only be disabled on a per-product basis on one customer tenant at a time. For more information, see [Allow or block self-service purchases and trials](manage-self-service-purchases-admins.md#allow-or-block-self-service-purchases-and-trials).
       - question: |
           What's the role of Microsoft's partners in self-service purchases?
         answer: |
           Partners who have delegated administration privileges can see self-service purchases in the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">Microsoft 365 admin center</a>, just like an admin. Partners can help support an organization that wants to centralize products bought through self-service purchases. Additionally, partners can offer solutions to extend the capabilities of a self-service purchase.
+      - question: |
+          What role does a partner need to manage self-service purchases?
+        answer: |
+          Partners who are Admins On Behalf Of (AOBO) a customer must have a role that's set to Global Administrator to manage and disable self-service purchases in the Microsoft 365 admin center and via PowerShell. Other roles are restricted from managing and disabling self-service purchases.
+      - question: |
+          What obligations does a partner have around self-service purchases, billing, and support?
+        answer: |
+          None. Customers are responsible for all payments and billing for any self-service purchases that they make.

microsoft-365/syntex/esignature-overview.md

@@ -50,7 +50,7 @@ Before you can use SharePoint eSignature, you must first link your Azure subscri
 
 ### External sharing
 
-SharePoint eSignature enables binding agreements between parties by allowing guests access to SharePoint to electronically sign documents. Certain external sharing must be enabled at a tenant or site level to allow this access. For more information, see [Set up SharePoint eSignature for external recipients](esignature-setup.md#external-recipients). Consider whether this meets your compliance and security requirements when enabling eSignature.
+SharePoint eSignature enables binding agreements between parties. External parties are allowed guests access to SharePoint via Azure Active directory in order to electronically sign a document. Certain external sharing settings must be enabled at a tenant and site level to allow this access. For more information, see [Set up SharePoint eSignature for external recipients](esignature-setup.md#external-recipients). Consider whether this meets your compliance and security requirements when enabling eSignature.
 
 ## Using other signature providers