MSP & Enterprise User Management
How MSPs and Enterprise Admins manage users, roles, and sign-in across the MCM platform.
MSP & Enterprise User Management
MCM provides one place to manage users, roles, and access for the whole platform. MSPs manage their own team and have visibility across all enterprise tenants. Enterprise Owners and Admins manage the users of the enterprises assigned to them. Instead of separate user lists per tenant, a role is assigned to a user for exactly the enterprises, accounts, stacks, or dashboards they need.
Users and Roles
Administrators invite team members and assign each a role. A clear permission matrix shows which actions each role can take in each module, and the assigned users are visible on each enterprise, account, dashboard, and stack. Deactivating a user immediately revokes their access across all modules — a single action in one place covers everything.
Resource-level access: a role is assigned to a user for specific Enterprises, accounts, stacks, or dashboards. One person can be an Admin of one enterprise and a Viewer of another, or be given access to a single stack or dashboard without seeing anything else.
Single Sign-On
Staff can sign in with their organisation's work accounts instead of a separate password. Microsoft Entra ID, OpenID Connect and SAML identity providers are supported, using domain-verified connections. You can require single sign-on for a domain, while Owners can still sign in with a password so you are never locked out if the identity provider is unavailable. Users signing in for the first time receive a default role.
Roles Reference
MCM ships with default roles at three levels. Each level has an Owner, Admin, and Viewer role, except at the account level, which has Admin and Viewer.
MSP Level
| Role | Capabilities |
|---|---|
| MSP Owner | Full control across the entire MSP — every enterprise, account, billing, dashboards, and domain setup |
| MSP Admin | Manage every enterprise and account across the MSP, without ownership-level delete actions |
| MSP Viewer | Read-only access across the entire MSP |
Enterprise Level
| Role | Capabilities |
|---|---|
| Enterprise Owner | Full control over the assigned enterprises, including billing and user management within them |
| Enterprise Admin | Manage the assigned enterprises — accounts, modules, and users within them |
| Enterprise Viewer | Read-only access to the assigned enterprises |
Account Level
| Role | Capabilities |
|---|---|
| Account Admin | Manage one or more specific accounts and their modules |
| Account Viewer | Read-only access to one or more specific accounts |