Delegate access to tenants
Delegate technician admin access to customer tenants
Overview
There are several roles that define how techs can access tenants:
Global administrator- full access to MSP and all customer tenantsAdministrator- full access but only to designated customer tenantsRead-only administrator- read only access to designated customer tenants
Global administrator
To promote technician to Global administrator:
- Access your MSP admin portal
- Navigate to your
Userssection - Click on
...and chooseMake admin
Administrator
To delegate access to customer tenant with Administrator role:
- Access your MSP admin portal
- Navigate to your
Customerssection - Click on
...for a chosen customer tenant and chooseDelegate admin - From the dropdown search for technician email address and assign the
Administratorrole
Read-only administrator
To delegate access to customer tenant with Read-only administrator role:
- Access your MSP admin portal
- Navigate to your
Customerssection - Click on
...for a chosen customer tenant and chooseDelegate admin - From the dropdown search for technician email address and assign the
Read-only administratorrole
Delegate access with groups
Instead of manually delegating access to customer tenants for each technician, you can perform delegation with user groups. Simply create user groups and assign technicians to them, and then you can use groups for tenant access delegation.
💡
Only groups with direct user assignment are supported for tenant access delegation.
- Access your MSP admin portal
- Navigate to
Groupssection on the left, create a user group, and assign users to the group
- Navigate to your
Customerssection - Click on
...for a chosen customer tenant and chooseDelegate admin - From the dropdown search for the group you want to use and delegate access with a chosen role
