Scope MSP Admins to Organizations

Users can select specific permission and access levels for their Multi-Service Provider (MSP) admins within the Multi-Tenant Portal (MTP). This establishes more structured security for IT admins to service their customers to their exact preferences. 

When MSP’s have multiple customers or contracts with external vendors and need their employees to have restricted access to some accounts, this feature allows individual access to be granted. 

Prerequisites:

  • An admin must have the Admin with Billing role to grant themselves access to an organization, otherwise, that access has to be provided by someone with the Admin with Billing role in the MSP. 

Considerations:

  • When admins log in, they will only see the orgs that they have access to.
    • Note: At least one org needs to be selected for MTP admins to see which orgs they have access to.
  • Suspended admins won’t have any access to our consoles or orgs.

Editing Existing Admins’ Permissions and Access

To edit the permissions and access of existing admins:

  1. Log in to your MTP Dashboard: https://console.jumpcloud.com.
  2. Click the Administrators tab and select the admin you want to edit. The Edit Administrators side window displays.
  3. Click the Permissions & Access tab. 
  4. In the Permissions field, click the Role* dropdown menu and reassign the admin role as needed.
  5. In the Organization Access field, select which orgs you want the admin to be added to. See JumpCloud’s Admin Portal Roles to learn more.
  6. Click Save

Adding Permissions and Access for New Admins

To add permissions and access for new admins:

  1. Log in to your MTP: https://console.jumpcloud.com.
  2. Click on the Administrators tab, then click the Plus icon ( + ). The Create New Administrator side window displays.
  3. On the Details tab, enter the First NameLast Name, and Administrator Email Address fields, then click the Permissions & Access tab.
  4. In the Permissions field, click the Role* dropdown menu and assign the admin role as needed.
  5. In the Organization Access field, select which orgs you want the admin to be added to. You need to have at least one org selected to be able to create an admin. See JumpCloud’s Admin Portal Roles to learn more.
  6. Click Save.

Removing Admins from an Org

To remove an admin from an org:

  1. Log in to your MTP: https://console.jumpcloud.com.
  2. Click the Organizations tab, then select an org to view its details. The Manage Organization side window displays.
  3. Scroll down to Administrators and click on the trashcan icon to the right of the admin you want to remove from the org. 
  4. Click Save

FAQs

Will a new MTP admin have access to all organizations by default?

When you create a new admin, that admin will not automatically be given access to any organization. This is a shift from existing behavior to provide more security.

Why am I only seeing 2 organizations when I login and I am an Admin w/ Billing?

It’s possible that another Admin w/ Billing role user has restricted your access to specific organizations to limit exposure or other organizational reasons. Please work with your main admin to restore your access.

Can suspended admins have access to organizations?

No, as always suspended admins won’t have any access to our consoles.

Does my Role-Based Access Control (RBAC) change after this feature addition?

No, the role based access remains the same. The only difference is that you have organizational access in addition.

Interested in our Integrations? Learn more:

Back to Top

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case