User Administration

As an administrator, many a time you would have felt mundane routines spill over crucial attention-seeking jobs of your network. Mobile Device Manager Plus MSP answers this concern through its User & Role Management module; delegating routine activities to chosen users with well-defined permission levels.

It is recommended to have a common Super Admin for all the Zoho services, used across the organization. If the added user is a part of another Zoho service, you cannot exercise Super Admin privileges on this user

Role Management

Some of the most commonly used Roles are specified under Pre-defined Roles. However, you also have the flexibility to define roles that best suit your requirements under the User-defined Roles and grant appropriate permissions. Here's a brief on the Pre-defined and User-defined roles respectively:

User-defined Role

You can tailor-make any number of roles, using Mobile Device Manager Plus MSP and give them permissions of your choice based on your personalized needs. These customized roles fall under the User-defined category. You can choose to grant your technicians access to specific modules such as enrollment, app management etc, to comply with exisiting privacy practices in your organization. For a better understanding let us quickly see how to create a User-defined Role in the following section. Follow the steps mentioned below to create a new User-defined role:

1. On the web console, select the Admin tab and click  User Administration. This opens the User Administration page.
2. Select the Role tab and click the Add Role button.
3. Specify the Role Name and a small description about it.
4. You can define module-wise permission level for the Role in the Select Control Section.
   The permission levels are broadly classified into:
   Full Control - To perform all operations like an administrator, for the specific module
   Read - To only view the details in that module
   No Access - To hide the module from the User .
5. Click Add button.

You have successfully created a new role.

The role you have just created will now be available in the Roles list of the user creation module. Role deletion cannot be performed if that role is associated even with a single User. However you can modify the permission levels for all User-defined roles.

Pre-defined Roles

You will find the following roles in the Pre-defined category:

1. Administrator
2. Technician
3. Guest
4. Auditor
5. IT Asset Manager

The first admin/user who creates an account with the MDM MSP, will be considered as the super admin for the organization. Super admin does not posses excessive powers than an administrator, however super admin cannot be deleted from the organization.

Administrator Role:

The Administrator role signifies the "Admin user" who exercises full control, on all modules. The operations that are listed under the Admin tab include:

• Add  new users and create new roles.
• Enroll Devices
• Rebranding ME MDM.
• Viewing Action Logs of Mobile Device Manager Plus MSP.
• Has full control permission for the  Inventory module.
• Has full control for Reports module.
• Has full control for Profiles module.
• Has full control on Apps module.  

Making changes to this role is strictly prohibited.

Technician Role:

The Technician Role has a well defined set of permissions to do specific operations. Users under the Technician role are restricted from performing all the operations listed under the Admin tab. The technician is also restricted from using MDM MSP settings.

The operations that can be performed by users associated with the Technician Role include:

• Can perform Scan operations.
• Has write permission for the following,  Inventory, Reports, Profiles and Apps in Mobile Device Management.  

Guest Role:

The Guest Role retains the Read Only permission to all modules- for viewing, MDM MSP inventory details, reports, profiles and Apps of the mobile devices. A user who is associated to the Guest Role, will have the privilege to view  IT asset information. Making changes to this role is strictly prohibited.

Auditor:

The Auditor role is specially crafted for Auditing Purposes. This role will help you grant permission to auditors view the details of software and hardware inventory.

IT Asset Manager:

The IT Asset Manager has complete access to the Asset Management module.  IT Asset Manager can view the Inventory details of all the Mobile Devices. All the other features are inaccessible.

User Management

Creating a User and Associating a Role

You can associate a User with a Role while creating a New User. To create a user follow the steps mentioned below:

1. Login toMobile Device Manager Plus MSP as anAdministrator
2. ClickUser Administration
3. Specify a Email, User Name, Role and  Phone number
4. Click Add User, an email will be sent from Zoho Accounts to the user to join the organization.

On accepting the mail, an account will be created for the user and the user will be prompted to enter a password.

Modifying User details

Mobile Device Manager Plus MSP offers the flexibility to modify the role of users, to best suit your changing requirements. You can change the Role of the user as and when required.

Deleting a Users

At times when you find a user's contribution obsolete, you can go ahead and delete the user from the User List. The user so removed will no more exercise Module Permissions.

Transfer Administrator Privilege:

If the administratior of Mobile Device Manager Plus MSP wishes to pass over his rights as an administrator, he can do so by assigning the administrator role to another user of the organization. Transfer of the admin privilege is necessary in the following cases:

• The current MDM MSP administrator is changing roles or jobs.
• The organization has purchased only one administrator license.

Follow the steps given below to transfer the administration ownership to another user:

1. Navigate to User Administration under the Admin tab.
2. Select the user to whom the ownership is to be transferred.
3. Under Actions, click on Transfer Ownership.
4. Enter the e-mail address of the user who will be given the administrator privilege and click Transfer.
5. If the user is already a part of the organization, the ownership will be transferred immediately and the existing administrator's rights will be revoked.
6. If the user is not part of the organization, he will receive an e-mail to join the organization. The existing administrator's rights will be revoked once the new administrator has joined the organization.

NOTE:This option is available only for the MDM MSP account administrator.

Inviting Technicians

You can invite users (technicians) from here : Admin ->Global Settings -> User Administration. You can specify the email address, name and role of the user. Users will be sent an email, to join the organization. On accepting the Join Organization invitation sent from Zoho Accounts, users can access MDM MSP.

If you are an existing user of ManageEngine ServiceDesk Plus On-Demand or any such ZOHO services, you will have an active account with Zoho. In such cases, you will not receive an email to join the organization. You will have access to MDM MSP. To know more about Zoho Accounts, refer to the FAQs given here.

Points to be Noted

1. Only Administrators will have permission to modify the user details, create or delete a user.
2. Only Administrators are allowed to create new roles and to modify or delete roles.