hmLoadTopic({
hmKeywords:"",
hmTitle:"MSP Users",
hmDescription:"If you set up your company using the MSP customer setup, you can create a special type of native user (MSP User). To review and edit the user, navigate to More > Access Rights...",
hmPrevLink:"msp_custom_installer.html",
hmNextLink:"msp_custom_user.html",
hmParentLink:"msp.html",
hmBreadCrumbs:"<a href=\"using.html\">Using ESET PROTECT On-Prem<\/a> &gt; <a href=\"msp.html\">ESET PROTECT On-Prem for Managed Service Providers<\/a>",
hmTitlePath:"Using ESET PROTECT On-Prem > ESET PROTECT On-Prem for Managed Service Providers > MSP Users",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">MSP Users<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">If you set up your company using the <a href=\"msp_company.html\" class=\"topiclink\">MSP customer setup<\/a>, you can create a special type of <a href=\"admin_ar_users.html\" class=\"topiclink\">native user<\/a> (MSP User). To review and edit the user, navigate to <span class=\"f_UI\">More<\/span> &gt; <span class=\"f_UI\">Access Rights<\/span> &gt; <span class=\"f_UI\"><a href=\"admin_ar_users.html\" class=\"topiclink\">Users<\/a><\/span> menu.<\/p>\n\r<p class=\"p_Normal\">You can also <a href=\"msp_custom_user.html\" class=\"topiclink\">create a custom MSP user<\/a>, for example for an MSP or a reseller.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"necessary\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Necessary permissions<\/span><\/h2>\n\r<p class=\"p_Normal\">To create the new user in the <a href=\"msp_company.html\" class=\"topiclink\">MSP customer setup<\/a>, you need the access rights to the company you set up and <span class=\"f_UI\">Shared Objects<\/span> groups.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table style=\"border:none;border-spacing:0;padding:0;line-height: normal;\"><tr style=\"vertical-align:baseline\"><td style=\"border:none;padding:0;width:18px\"><img id=\"toggle0186a1_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/><\/td><td style=\"border:none;padding:0\"><a id=\"toggle0186a1_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a1_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Detailed permission schema<\/a><\/td><\/tr><\/table><\/div>\n\r<div id=\"toggle0186a1\" class=\"dropdown-toggle-body\" style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;display:none\"><table style=\"border:none; border-spacing:0;\" role=\"presentation\">\n\r<tr>\n\r<td style=\"vertical-align:top; padding:0; border:none\"><h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Set up a single company<\/span><\/h2>\n\r<p class=\"p_Normal\">Access rights necessary to create a user during the <span class=\"f_Path\">Company A<\/span> setup:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\"> access for all <\/span><span class=\"f_UI\">Shared objects<\/span><span class=\"f_NormalList\"> groups.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Write<\/span> access for the group of the MSP customer.<\/p>\n\r<p class=\"p_Normal\"><img alt=\"Permissions for a single company\" title=\"Permissions for a single company\" width=\"549\" height=\"406\" style=\"margin:0;width:549px;height:406px;border:none\" src=\".\/images\/msp_user_permission.png\"\/><\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Set up all companies of one MSP<\/span><\/h2>\n\r<p class=\"p_Normal\">Access rights necessary to create users for all companies belonging to <span class=\"f_Path\">MSP provider<\/span>:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\"> access for all <\/span><span class=\"f_UI\">Shared objects<\/span><span class=\"f_NormalList\"> groups.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Write<\/span> access for the group of the MSP provider.<\/p>\n\r<p class=\"p_Normal\"><img alt=\"Permissions of one MSP\" title=\"Permissions of one MSP\" width=\"504\" height=\"402\" style=\"margin:0;width:504px;height:402px;border:none\" src=\".\/images\/msp_user_permission2.png\"\/><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\">To have <a href=\"admin_access_rights.html\" class=\"topiclink\">access rights<\/a> means the current (acting) user has <a href=\"admin_ar_permissions_sets.html\" class=\"topiclink\">permission sets<\/a> assigned with access over the groups as mentioned above. If you do not have the required access rights, the MSP customer setup ends with an error.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">MSP User features<\/span><\/h2>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">They can log in to the ESET PROTECT Web Console and manage devices and other objects they have access rights for.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">They can create another native user with the same or lesser permissions.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>They cannot create <a href=\"admin_user_management.html\" class=\"topiclink\">Computer Users<\/a>. If creating a Computer User is required, an administrator needs to do so.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">The AD synchronization is not available for users created using the <a href=\"msp_company.html\" class=\"topiclink\">MSP company setup<\/a>.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem has the following settings for each new MSP user:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Description<\/span><span class=\"f_NormalList\">—Native user created via the MSP customer Setup Wizard<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Tags<\/span><span class=\"f_NormalList\">—The user is tagged with the company name<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Home group<\/span><span class=\"f_NormalList\">—Static group of the company<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Autologout<\/span><span class=\"f_NormalList\">—15 minutes<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">The account is enabled and password change is not required<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Permission sets<\/span>—each MSP User has 2 permission sets. One for its home group and one for <span class=\"f_UI\">Shared Objects<\/span> groups.<\/p>\n\r<p class=\"p_Normal\"><img alt=\"Overview of Company\" title=\"Overview of Company\" width=\"900\" height=\"550\" style=\"margin:0;width:900px;height:550px;border:none\" src=\".\/images\/msp_user.png\"\/><\/p>\n\r"
})
