Skip to main content

Scope MTP Admins to Organizations

Admins can select specific permission and access levels for their Multi-Tenant Portal (MTP) Admins. This establishes more structured security for IT to service their customers to their exact preferences.

When companies have multiple customers or contracts with external vendors and need their employees to have restricted access to some accounts, this feature allows individual access to be granted.

Prerequisites:

  • An Admin must have the Admin with Billing role to grant themselves access to an organization, otherwise, that access has to be provided by someone with the Admin with Billing role in the MTP.

Considerations:

  • When Admins log in, they will only see the orgs that they have access to.
    • Note: At least one org needs to be selected for MTP Admins to see which orgs they have access to.
  • Suspended Admins won’t have any access to any org's MTP or Admin Portals.

Editing Existing Admins’ Permissions and Access​

To edit the permissions and access of existing admins:

  1. Log in to your MTP.
  2. Click the Administratorstab and select the Admin you want to edit.
  3. Click the Permissions & Access tab.
  4. In the Permissions field, click the Role*dropdown menu and reassign the admin role as needed.
  5. In the Organization Access field, select which orgs you want the admin to be added to. See JumpCloud’s Admin Portal Roles to learn more.
  6. Click Save.

Adding Permissions and Access for New Admins​

To add permissions and access for new admins:

  1. Log in to your MTP.
  2. Click on the Administratorstab, then click the plus icon ( + ). The Create New Administrator side window displays.
  3. On the Detailstab, enter the First Name, Last Name, and Administrator Email Addressfields, then click the Permissions & Access tab.
  4. In the Permissions field, click the Role*dropdown menu and assign the Admin role as needed. See JumpCloud’s Admin Portal Roles to learn more.
  5. In the Organization Access field, select which orgs you want the Admin to be added to. You need to have at least one org selected to be able to create an Admin.
  6. Click Save.

Removing Admins from an Org​

To remove an admin from an org:

  1. Log in to your MTP.
  2. Click the Organizationstab, then select an org to view its details.
  3. Scroll down to Administratorsand click on the trashcan icon to the right of the Admin you want to remove from the org.
  4. Click Save.

FAQs​

Will a new MTP Admin have access to all organizations by default?

When you create a new Admin, that Admin will not automatically be given access to any organization. This is a shift from existing behavior to provide more security.

Why am I only seeing 2 organizations when I login and I am an Admin w/ Billing?

It’s possible that another Admin w/ Billing role user has restricted your access to specific organizations to limit exposure or other organizational reasons. Please work with your main Admin to restore your access.

Can suspended admins have access to organizations?

No, as always suspended Admins won’t have any access to our portals.

Does my Role-Based Access Control (RBAC) change after this feature addition?

No, the role based access remains the same. The only difference is that you have organizational access in addition.

If I am an Admin with Billing, can I add myself to an organization?

Yes!

If I add a new organization to the MTP dashboard, will that org automatically be added to all my existing Admins?

No, you will need to edit your Admins to give them access to that new org.

Was this information helpful?