Manage Admins in the Enterprise Portal (Preview)

You can manage Enterprise Portal Administrator accounts in each of your managed organizations within the JumpCloud Enterprise Portal. After you add a user and assign them an Administrator role, you can view their details.

Terminology:

• Enterprise: The enterprise organization. This is where you manage the settings for all organizations. Some of the settings configured for Enterprise takes precedence over the organizational settings.
• Organizations: These are the managed sub-organizations.

Considerations:

• All Admins in your Enterprise Portal have access to all of the managed organizations in that Enterprise Portal. 
• The Enterprise Portal supports granular permissions; you can restrict access to specific organizations per Enterprise Portal Administrator account. 
• Admins added to an org's Enterprise Portal are automatically given access to organizations created in the Enterprise Portal.
• When creating a new Admin, API access will be disabled by default.
  • Only Super Admins (Admins with Billing or equivalent) can enable this. See Manage Administrator Roles and Access in the Enterprise Portal to learn more.

Adding an Admin

Administrators are created only from the Users page under Identity Management. You cannot create an Administrator directly without promoting an existing user.

Promoting a User to Administrator Role

1. Log in to the JumpCloud Enterprise Portal.
2. Go to the Identity Management > Users page.
3. Select the checkbox next to an existing user to promote.
4. Click the Actions dropdown, then click Assign Administrator Access.
   
5. In the Assign to Administrator popup, choose a predefined role and organizations to assign to the user.
   
6. Optional) Enable Enterprise Admin Access or API access when your permissions and the selected role allow it.
7. Select the Role you want to assign and Organization for this Admin. You can select multiple organizations.

8. Click Assign to elevate this user to Administrator role.
   This user’s details appear on the Administrators tab as well.

Viewing Details for Your Enterprise Portal Admins

To view details for Enterprise Portal Admins:

1. Log in to the Enterprise Portal.
2. Go to Identity Management > Users > Administrators tab.
3. The following details are shown for each Administrator:
   • Name - The Admin’s first and last name.
   • Managed By: Name of the organization to which the Administrator belongs.
   • Email - The Admin’s account email address.
   • Role - The Admin's role/permission level.
   • Status: Whether the Administrator is active or staged.
   • Organizations - The number of organizations the Administrator can access.
   • API Key Access: Whether API access is enabled or disabled for the Administrator.

Editing Admins

To edit an Admin:

1. Log in to the Enterprise Portal.
2. Go to Identity Management > Users > Administrators tab.
3. Click on the Administrator’s Name in the list. The Edit Administrator popup appears.
   
4. Modify the Administrator’s information:
   • First Name - The Admin's first name.
   • Last Name - The Admin's first name.
   • Administrator Email Address - The Admin's email address. This field is required.
5. If you want to give the Administrator API access, select the checkbox next to Enable API access. If it's enabled and the Administrator has generated a key, you'll see the first four characters of the Admin’s API key, and the date it was created as well. See JumpCloud API’s to learn more.
6. If the Administrator has Enterprise access, clear the Enterprise Access checkbox if needed.
7. Edit the Role and Organization of the Administrator from the respective drop-down. The Organization dropdown displays only the organizations the Administrator has access to.
8. Click Remove Administrator Access to remove their access to all organizations they have access to.
9. Once done, click Save.

Requiring MFA for Admins

Removing Administrator Access

To remove Administrator access of an existing Administrator:

1. Go to the Identity Management > Users > Administrators tab.
2. Click the name of any Administrator.
3. In the Edit Administrator dialog, then click Remove Administrator Access.
   
   A Remove Admin Role dialog is displayed warning the Administrator.
   
4. Select the checkbox and click Remove.
   You have successfully removed the Administrator access for the selected Administrator.

Suspending  Administrator Accounts in the Enterprise Portal

To suspend an Administrator account: 

1. Log in to the Enterprise Portal.
2. Go to Identity Management > Users.
3. Find or search for the Administrator in the list and select the checkbox next to their name.
4. Click the Actions dropdown menu and click Suspend Users.

5. Confirm that you want to suspend the selected account, then click Suspend. 
6. Click Save. The account appears as suspended in the Admins list.

To restore a suspended Administrator account:

1. Log in to the Enterprise Portal.
2. Go to Identity Management > Users.
3. Select the checkbox next to a suspended Administrator from the list.
4. From the Actions dropdown, click Activate. You can either schedule the activation, or click Activate Now > Activate User.
5. Click Save. The account appears as Active in the Admins list.