Features of ESET PROTECT On-Prem for MSP users
ESET PROTECT On-Prem offers a set of features focused on MSP users. All MSP related features are enabled after you import an EMA 2 account to ESET PROTECT On-Prem.
Customer Setup Wizard
The key MSP feature in the ESET PROTECT On-Prem is the MSP customer setup. This feature helps you create users and customized ESET Management Agent installer for your customer.
MSP TreeAfter importing the EMA 2 account, ESET PROTECT On-Prem synchronizes with ESET MSP Portal (EMA 2) and creates the MSP Tree. The MSP Tree is a structure in the Computers menu, which represents the structure of companies in your EMA 2 account. Items in the MSP Tree uses different icons than standard ESET PROTECT On-Prem devices and groups. You cannot modify the MSP Tree structure in the Web Console. Only after you remove the EMA 2 account from the License Management can you start editing and removing customers from the tree. Suspending a company in EMA 2 does not remove the company from the MSP Tree in ESET PROTECT On-Prem. |
|
Shared Objects Group
After the synchronization of the MSP account, ESET PROTECT On-Prem creates the MSP tree. There is one Shared Objects access group for each MSP and MSP manager. Access Group sets the object's Static Group and access to the object based on the user's access rights. You cannot store computers in Shared Objects. Shared Objects are not visible under Groups in Computers. MSPs can share objects like policies and tasks via the Shared Objects access group.
Each MSP user created using the company Setup Wizard has read and use access to all Shared Objects groups above the user. You can inspect the Permission Sets assigned to the user to see the list of access groups. Users can access only upstream Shared Object groups, not groups from parallel MSP managers.
Managed customers
After synchronizing the MSP account, the MSP user can see the managed customers list in the 
Managed Customers section on the main ESET PROTECT On-Prem menu.
ESET PROTECT certificates and MSP
When you import the EMA 2 account in ESET PROTECT On-Prem, your ESET PROTECT Server creates a new MSP Certification Authority (CA). The MSP CA is stored in the Shared Objects static group under MSP root group. There is only one MSP CA, even if you import multiple accounts. If you remove the MSP CA, ESET PROTECT On-Prem creates a new MSP CA after the next synchronization with the license servers. The synchronization occurs automatically once a day.
ESET PROTECT On-Prem creates a new peer Agent certificate after a company is set up using the customer Setup Wizard. The MSP CA signs these peer certificates. Each certificate is tagged with the company name. Creating a separate certificate for each company improves the overall security.
If you remove a CA, all computers using certificates signed by that CA would not able to connect to the ESET PROTECT Server anymore. Manual re-deployment of the ESET Management Agent would be necessary.
MSP in the Status Overview
You get the access to the new MSP tile in the Status Overview after importing the EMA 2 account. The MSP tile displays basic information about your account.