Create a Tenant Administrator

Why?

• Customize the role rights
• Create Tenant Administrator user accounts

Customize the role rights

To create one or more tenant administrator users, review the default role rights for the predefined Tenant Administrator role. These rights apply to all tenant administrator users that you create. Modify the rights to limit access.
Follow these steps:

1. Log in using the Administrator role.
2. Select Admin, Roles.
3. Select Tenant Administrator, Edit.
4. Click a row. Edit.
5. Modify the Selected Rights list.
6. Click OK.
   Next, create tenant administrator user accounts.

Create Tenant Administrator User Accounts

Create a tenant administrator user account for each subset of tenants as needed. Each of the accounts is based on the Tenant Administrator role. You can also assign the tenant groups and product privileges.
Follow these steps:

1. Log in using the Administrator role.
2. Click Admin, Users.
3. Click New.
4. Enter a unique name for the user account. Add other field information.
5. Select Tenant Administrator from the Role list.
6. Click Permissions Groups.
   Note: Groups in the Default Tenant workspace do not display for the Tenant Administrator role.
7. Add tenant groups or subgroups to the Selected Groups list.
8. (Optional) Click Enable My Custom Groups Functionality.
   Lets users create custom groups for troubleshooting and analysis. (Visible only on the My Custom Groups page.) Otherwise, a default group appears in the dashboards.
9. (Optional) Change the Default Group.
10. Click Product Privileges.
11. For the Data Aggregator data source, select the Administrator product privilege or assign nonadministrative privileges.
    Note: Some data sources are not tenant aware, so devices belonging to other tenants will be visible. Consult your data source documentation and determine whether to assign Administrator privileges.
12. Save.
    The new account appears on the Manage Users page.
13. Repeat these steps for each tenant administrator account that you need.

What?

• Predefined Administrator role
• Has all administrator role rights
• Has Administer Tenant role right
• Editable to limit access

Tenant Administrator Role Rights

By default, the Tenant Administrator can create, edit, clone, and delete tenants, and manage user accounts. They can also perform discovery and manage device collections for tenants. These role rights are editable.
Tenant administrators do not have access to any groups in the Default Tenant workspace or domain. However, the My Custom Groups feature can be enabled for any tenant administrator to more easily manage their assigned tenant groups.

How?

• Customize the role rights
• Create Tenant Administrator user accounts

Customize the Role Rights

To create one or more tenant administrator users, review the default role rights for the predefined Tenant Administrator role. These rights apply to all tenant administrator users that you create. Modify the rights to limit access.
Follow these steps:

1. Log in using the Administrator role.
2. Select Admin, Roles.
3. Select Tenant Administrator, Edit.
4. Click a row. Edit.
5. Modify the Selected Rights list.
6. Click OK.
   Next, create tenant administrator user accounts.

Create Tenant Administrator User Accounts

Create a tenant administrator user account for each subset of tenants as needed. Each of the accounts is based on the Tenant Administrator role. You can also assign the tenant groups and product privileges.
Follow these steps:

1. Log in using the Administrator role.
2. Click Admin, Users.
3. Click New.
4. Enter a unique name for the user account. Add other field information.
5. Select Tenant Administrator from the Role list.
6. Click Permissions Groups.
   Note: Groups in the Default Tenant workspace do not display for the Tenant Administrator role.
7. Add tenant groups or subgroups to the Selected Groups list.
8. (Optional) Click Enable My Custom Groups Functionality.
   Lets users create custom groups for troubleshooting and analysis. (Visible only on the My Custom Groups page.) Otherwise, a default group appears in the dashboards.
9. (Optional) Change the Default Group.
10. Click Product Privileges.
11. For the Data Aggregator data source, select the Administrator product privilege or assign nonadministrative privileges.
    Note: Some data sources are not tenant aware, so devices belonging to other tenants will be visible. Consult your data source documentation and determine whether to assign Administrator privileges.
12. Save.
    The new account appears on the Manage Users page.
13. Repeat these steps for each tenant administrator account that you need.