> ## Documentation Index > Fetch the complete documentation index at: https://docs.idemeum.com/llms.txt > Use this file to discover all available pages before exploring further. # Delegate access to tenants > Delegate admin access to customer child tenants. ## Roles overview There are several roles that define how admins can access tenants: * `Global administrator` - full admin access to everything * `Administrator` - full access but only to designated tenants * `Read-only administrator` - read only access to designated tenants ### Global administrator role * Access admin portal of your parent tenant * Navigate to your `Users` section * Click on `...` and choose `Make admin` ### Administrator role * Access admin portal of your parent tenant * Navigate to your `Tenants` section * Click on `...` for a chosen organization and choose `Delegate admin` * From the dropdown search for technician email address and assign the `Administrator` role ### Read-only administrator role * Access admin portal of your parent tenant * Navigate to your `Tenants` section * Click on `...` for a chosen tenant and choose `Delegate admin` * From the dropdown search for technician email address and assign the `Read-only administrator` role ## How to delegate access to customer tenant * Login to your parent MSP tenant admin portal * Access `Tenants` on the left menu, find the tenant that you need, click on `...` and then choose `Delegate admin access` * You can now choose users from the dropdown along with the role they will assume * At the bottom you will have a list of all `Global admins` who have access to all tenants by default Clean Shot 2026 05 25 At 17 01 20@2x