Delegate access to tenants
Delegate technician admin access to customer tenants
Overview
There are several roles that define how techs can access tenants:
Global administrator
- full access to MSP and all customer tenantsAdministrator
- full access but only to designated customer tenantsRead-only administrator
- read only access to designated customer tenants
Global administrator
To promote technician to Global administrator
:
- Access your MSP admin portal
- Navigate to your
Users
section - Click on
...
and chooseMake admin
Administrator
To delegate access to customer tenant with Administrator
role:
- Access your MSP admin portal
- Navigate to your
Customers
section - Click on
...
for a chosen customer tenant and chooseDelegate admin
- From the dropdown search for technician email address and assign the
Administrator
role
Read-only administrator
To delegate access to customer tenant with Read-only administrator
role:
- Access your MSP admin portal
- Navigate to your
Customers
section - Click on
...
for a chosen customer tenant and chooseDelegate admin
- From the dropdown search for technician email address and assign the
Read-only administrator
role
Delegate access with groups
Instead of manually delegating access to customer tenants for each technician, you can perform delegation with user groups. Simply create user groups and assign technicians to them, and then you can use groups for tenant access delegation.
💡
Only groups with direct user assignment are supported for tenant access delegation.
- Access your MSP admin portal
- Navigate to
Groups
section on the left, create a user group, and assign users to the group
- Navigate to your
Customers
section - Click on
...
for a chosen customer tenant and chooseDelegate admin
- From the dropdown search for the group you want to use and delegate access with a chosen role