Action1 5 Documentation 5 Users and Roles

Users and Roles

 

Managed Service Providers and larger enterprises are encouraged to use the multi-tenancy in Action1 RMM – create several organizations within your Action1 account and organize managed endpoints around them. To share access to organizations’ data and settings with your co-workers, Action1 enables you to invite users and assign roles.

Understanding Roles

Action1 comes with preset roles and each role provides rights to a limited scope of Action1 functionality. It enables you to grant access to data specifically needed by the user’s position and establish a “least privilege” model, i.e., limit user rights exclusively to their tasks.

By default, the user who creates the first organization becomes both the Organization admin and Enterprise admin. Unless there are multiple organizations, the chief administration role is displayed just as “Admin”.

Role & Scope

Viewer – Organization
Manager – Organization
Organization admin – Organization
Enterprise admin – Entire enterprise (My enterprise)

Permissions

  • View all reports
  • View action history
  • View organization settings
  • Create alerts and scheduled reports
  • View policies
  • View all reports
  • View action history
  • Add and manage endpoints and groups
  • Create and manage custom reports
  • Create and manage policies, actions, schedules, alerts
  • Configure Endpoint Discovery
  • View and manage organization settings (except security)
  • Remote desktop
  • View all reports
  • View action history
  • Add and manage endpoints and groups
  • Create and manage custom reports
  • Create and manage policies, actions, schedules, alerts
  • Configure Endpoint Discovery
  • Remote desktop
  • View and manage all organization settings
  • Invite new users to the organization
  • View all reports
  • View action history
  • Add and manage endpoints and groups
  • Create and manage custom reports
  • Create and manage policies, actions, schedules, alerts
  • Configure Endpoint Discovery
  • View and manage all organization settings
  • Remote desktop
  • Invite new users to the organization
  • Create and delete organizations
  • Create and delete other Enterprise admin accounts
  • Manage enterprise security settings

Notes

The least elevated role. Recommended for users who need read-only access to data such as security officers, consultants, or internal auditors.
A limited administration role. Recommended for helpdesk personnel and organization operators.
This role gives unlimited access to data and configuration settings within an organization. Recommended for system administrators.
The tenant-wide administration role. This is the most powerful role.

Inviting Users

  1. Navigate to the Users page – it lists users across all organizations who have access to the Action1 account.
The users dashboard
  1. Select + Invite to add a new user.
  2. In a window that opens, provide the user’s name, their email address, and a temporary password. Finally, link a user either to a specific organization or to the entire enterprise (My enterprise) and assign a role. The user will get an email invitation to join Action1 RMM.

To remove or change user assignments, select actions next to a user and pick an action. Note that you have to revoke all user roles before deleting a user.

Inviting a new user

Assigning and Managing Roles

  1. Navigate to the Organizations page to review available organizations and role assignments. To learn more about organizations and how to switch among them, see Multi-Tenancy for MSPs and Enterprises
  2. Select an organization from the list. To see tenant-wide assignments, select My Enterprise [Entire Enterprise]. Note that you must have appropriate permissions to manage user assignments (enterprise or organization admin role depending on the settings you want to change).
  3. Review users and their roles. On top of that, Action1 displays the API credentials that were configured for the organization or enterprise.
Organizations dashboard
  • To add a new user assignment, select Add Users. Then, select a user from the list and pick a role. Make sure to invite a user first on the Users page.
  • To modify or revoke roles, select actions next to a user name and pick an option such as Remove role and Make manager.