hmLoadTopic({
hmKeywords:"",
hmTitle:"Static Group tree for ESET Business Account\/ESET PROTECT Hub\/ESET MSP Administrator",
hmDescription:"If you import subscriptions from ESET Business Account\/ESET PROTECT Hub, your company structure (including sites) appears in the Static Group tree.",
hmPrevLink:"admin_sg_import.html",
hmNextLink:"admin_dg.html",
hmParentLink:"admin_groups.html",
hmBreadCrumbs:"<a href=\"using.html\">Using ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Main Menu<\/a> &gt; <a href=\"computers.html\">Computers<\/a> &gt; <a href=\"admin_groups.html\">Groups<\/a>",
hmTitlePath:"Using ESET PROTECT On-Prem > ESET PROTECT On-Prem Main Menu > Computers > Groups > Static Group tree for ESET Business Account\/ESET PROTECT Hub\/ESET MSP Administrator",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Static Group tree for ESET Business Account\/ESET PROTECT Hub\/ESET MSP Administrator<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">If you <a href=\"license_security_admin.html\" class=\"topiclink\">import subscriptions from ESET Business Account\/ESET PROTECT Hub<\/a>, your company structure (including sites) appears in the Static Group tree.<\/p>\n\r<p class=\"p_Normal\">If you <a href=\"license_security_admin.html\" class=\"topiclink\">import subscriptions from ESET MSP Administrator<\/a>, the ESET MSP Administrator structure appears in the Static Group tree. Read more about <a href=\"msp.html\" class=\"topiclink\">ESET PROTECT On-Prem for Managed Service Providers<\/a>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Static Group tree structure<\/span><\/h2>\n\r<p class=\"p_Normal\">You can see the Static Group tree structure for ESET Business Account\/ESET PROTECT Hub\/ESET MSP Administrator in <span class=\"f_UI\">Computers<\/span> in the Static Group tree under <span class=\"f_UI\">All<\/span> &gt; <img alt=\"Companies\" title=\"Companies\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_companies.png\"\/> <span class=\"f_UI\">Companies<\/span>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Note\" title=\"Note\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">We recommend that you use an online account (ESET Business Account\/ESET PROTECT Hub\/ESET MSP Administrator) and <a href=\"license_security_admin.html\" class=\"topiclink\">synchronize it with ESET PROTECT On-Prem<\/a> to use ESET PROTECT On-Prem to the full potential.<\/p>\n\r<p class=\"p_Normal\">If you activated ESET PROTECT On-Prem with an activation key or an offline activation file, and did not synchronize subscriptions from ESET Business Account\/ESET PROTECT Hub\/ESET MSP Administrator, you will not see ESET Business Account\/ESET PROTECT Hub\/ESET MSP Administrator in the Static Group tree structure.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img alt=\"Static Group tree\" title=\"Static Group tree\" width=\"300\" height=\"422\" style=\"margin:0;width:300px;height:422px;border:none\" src=\".\/images\/static_group_tree.png\"\/><\/p>\n\r<p class=\"p_Normal\">Under <img alt=\"Companies\" title=\"Companies\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_companies.png\"\/> <span class=\"f_UI\">Companies<\/span>, you can see one or more ESET Business Account\/ESET PROTECT Hub\/ESET MSP Administrator trees, depending on the accounts synchronized in <a href=\"license_security_admin.html\" class=\"topiclink\">Subscription Management<\/a>.<\/p>\n\r<p class=\"p_Normal\">If you have an ESET MSP Administrator account, see the details on the <a href=\"msp.html\" class=\"topiclink\">structure of entities in the MSP<\/a>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Site synchronization<\/span><\/h2>\n\r<p class=\"p_Normal\">If you have ESET Business Account\/ESET PROTECT Hub <a href=\"https:\/\/help.eset.com\/getHelp?product=eba&amp;lang=en-US&amp;topic=sites\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">sites<\/a>, ESET PROTECT On-Prem automatically synchronizes them to the Static Group tree and assigns subscriptions from each site to the respective site Static Group (marked with the <img alt=\"Site\" title=\"Site\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/locate_default.png\"\/> icon) under the <img alt=\"Company\" title=\"Company\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/company_normal.png\"\/> ESET Business Account\/ESET PROTECT Hub company.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>We recommend that you use the automatically created Static Groups site to manage your sites (instead creating Static Groups manually).<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>You need to <a href=\"admin_ar_create_native_user.html\" class=\"topiclink\">create site administrators<\/a> and <a href=\"admin_ar_assign_user_a_permission_set.html\" class=\"topiclink\">assign their permissions<\/a> manually. Select the respective site Static Group as the Home Group for each site administrator and assign the administrator a permission set with the same Home Group.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_example\" >\n\r<tr class=\"Table_example\">\n\r<td class=\"Table_example\" style=\"width:4px; background-color:#77BB1A;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_example\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Example\" title=\"Example\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/example.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_example\"><p class=\"p_Normal\">For example, you have two sites (<span class=\"f_UI\">site1<\/span> and <span class=\"f_UI\">site2<\/span>):<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span><span class=\"f_NormalList\">Create a user for each site (<\/span><span class=\"f_UI\">site1_admin<\/span><span class=\"f_NormalList\"> and <\/span><span class=\"f_UI\">site2_admin<\/span><span class=\"f_NormalList\">).<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span><span class=\"f_NormalList\">Optional: Assign the respective Home Group (site) to each user (<\/span><span class=\"f_UI\">site1<\/span><span class=\"f_NormalList\"> to <\/span><span class=\"f_UI\">site1_admin<\/span><span class=\"f_NormalList\"> and <\/span><span class=\"f_UI\">site2<\/span><span class=\"f_NormalList\"> to <\/span><span class=\"f_UI\">site2_admin<\/span><span class=\"f_NormalList\">).<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span><span class=\"f_NormalList\">Create a permission set for each user (<\/span><span class=\"f_UI\">site1_permissions<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">site1_admin<\/span><span class=\"f_NormalList\"> and <\/span><span class=\"f_UI\">site2_permissions<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">site2_admin<\/span><span class=\"f_NormalList\">).<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span><span class=\"f_NormalList\">Assign the respective Static Group to each permission set (<\/span><span class=\"f_UI\">site1<\/span><span class=\"f_NormalList\"> to <\/span><span class=\"f_UI\">site1_permissions<\/span><span class=\"f_NormalList\"> and <\/span><span class=\"f_UI\">site2<\/span><span class=\"f_NormalList\"> to <\/span><span class=\"f_UI\">site2_permissions<\/span><span class=\"f_NormalList\">).<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span><span class=\"f_NormalList\">Assign each permission set\'s required functionalities and access level (<\/span><span class=\"f_UI\">Read<\/span><span class=\"f_NormalList\">, <\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\">, <\/span><span class=\"f_UI\">Write<\/span><span class=\"f_NormalList\">).<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">6.<\/span><span class=\"f_NormalList\">Assign each permission set to the respective user (<\/span><span class=\"f_UI\">site1_permissions<\/span><span class=\"f_NormalList\"> to <\/span><span class=\"f_UI\">site1_admin<\/span><span class=\"f_NormalList\"> and <\/span><span class=\"f_UI\">site2_permissions<\/span><span class=\"f_NormalList\"> to <\/span><span class=\"f_UI\">site2_admin<\/span><span class=\"f_NormalList\">).<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 39px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">7.<\/span>Now, each site administrator can only see their site and its objects (for example, subscriptions).<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\">If you have a site synchronized in the Static Group tree structure and you rename the site in ESET Business Account\/ESET PROTECT Hub, it will also be renamed in ESET PROTECT On-Prem.<\/p>\n\r<p class=\"p_Normal\">If you have a site synchronized in the Static Group tree structure and you delete the site in ESET Business Account\/ESET PROTECT Hub, its icon in ESET PROTECT On-Prem will change to <img alt=\"A deleted site\" title=\"A deleted site\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_location_unlinked.png\"\/>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Shared objects<\/span><\/h2>\n\r<p class=\"p_Normal\">The ESET Business Account\/ESET PROTECT Hub\/ESET MSP Administrator Static Group tree structure contains additional dedicated Static Groups called <span class=\"f_UI\">Shared Objects<\/span>.<\/p>\n\r<p class=\"p_Normal\">You can use <span class=\"f_UI\">Shared Objects<\/span> to share Web Console objects (policies, dynamic group templates, etc.) to more users with limited access (access to Static Groups on the same level as <span class=\"f_UI\">Shared Objects<\/span> or under them in the tree structure):<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span><span class=\"f_NormalList\">Select <\/span><span class=\"f_UI\">Shared Objects<\/span><span class=\"f_NormalList\"> as the Access Group for the Web Console object. <\/span>Access Group sets the object\'s Static Group and access to the object based on the user\'s access rights.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 39px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>Assign the <span class=\"f_UI\">Use<\/span> permission to <span class=\"f_UI\">Shared Objects<\/span>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Be sure limited users are not assigned <span class=\"f_UI\">Write<\/span> permission in <span class=\"f_UI\">Shared Objects<\/span> to prevent them from editing. The <span class=\"f_UI\">Use<\/span> permission is sufficient.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>You cannot store computers in <span class=\"f_UI\">Shared Objects<\/span>. <span class=\"f_UI\">Shared Objects<\/span> are not visible under <span class=\"f_UI\">Groups<\/span> in <span class=\"f_UI\">Computers<\/span>.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r"
})
