Previous Topic: Review and Customize the Tenant Administrator Role Rights


Create Tenant Administrator User Accounts

Create a tenant administrator user account for each subset of tenants that you have previously determined is needed. Each of the accounts is based on the Tenant Administrator role. In this same procedure, you also assign the tenant groups and product privileges for the tenant administrator.

Note: You must be a global administrator to perform this procedure.

Follow these steps:

  1. Click Admin, Users from the menu.

    The Manage users page opens.

  2. Click New.

    The Create New User wizard opens.

  3. Enter information for the fields. Use a unique name for the user account. Select Tenant Administrator from the Role drop-down list.
  4. Click Permissions Groups.

    The groups tree displays a list of tenant groups. (Groups in the Default Tenant workspace do not display in the tree for the Tenant Administrator role.)

  5. Add permission groups to the user account, as follows:

    The selected permission groups appear in the Selected Groups pane.

  6. (Optional) Click the option Enable My Custom Groups Functionality.

    This option lets the user create custom groups to organize managed items for troubleshooting and analysis. These groups are only available to this user on the My Custom Groups page. They do not appear in the main Groups tree.

    A default group is selected for the user automatically. When the user logs in, data from the default group appears in dashboards by default.

  7. (Optional) Select another group from the Default Group drop-down list.
  8. Click Product Privileges.
  9. For the Data Aggregator data source, select Administrator in the Product Privileges column. By default, this tenant administrator can administer Data Aggregator discovery and device collections for the assigned tenants. If you want to prevent this Tenant Administrator from accessing the Data Aggregator Administration pages, you can assign nonadministrative privileges instead.

    Note: Some data sources are not tenant aware. As such, you can see devices in the assigned managed groups that belong to other tenants or data sources because they are not filtered out. Consult your data source product documentation and determine whether to assign Administrator privileges for the other data sources.

  10. Click Save.

    The new user account appears on the Manage Users page.

  11. Repeat this procedure for each tenant administrator user that you want to create.

    You have successfully created tenant administrator user accounts.