Different User Roles and Role Based Access Permissions
Organization Role and OpManager Nexus Role
There are various roles and user privileges allocated to individual users in OpManager Nexus. The users of the organizations can assume various roles in OpManager Nexus based on specific requirement. The roles available are categorized under Zoho Organization account roles and OpManager Nexus account roles.
Organization Role
OpManager Nexus is a service by Zoho Corporation and use Zoho Accounts as a service for single-sign-on. Hence, by default each OpManager Nexus MSP Account will be associated with a Zoho Organization Account. There are two major roles in a Zoho Organization account viz., Org Admin and Org User. An Organization admin has the permission to assign or change the user organization roles using Zoho Directory, but an Org User will have very limited access. For further clarification you can contact OpManager Nexus support team.
Following are the user roles in an Organization Account:
- Org Admin: Org Admins have complete user management control over their Zoho Organization account. If they have the Super Admin or Admin role in their Organization account, they can add anyone as a OpManager Nexus MSP User.
- Org User: Org Users have no control on user management, but if they have Super Admin or Admin role in OpManager Nexus account, they can add any existing Zoho Organization user as a OpManager Nexus MSP User. Org User must contact the respective Organization Super Admin to upgrade to an Org Admin role.
NoteLearn more about the various privileges of a Zoho Organization Role.
NoteYour role in the Zoho Organization account purely dictates your OpManager Nexus MSP account privileges.
NoteA user email address can't be linked to multiple Zoho Organization accounts (and OpManager Nexus accounts). If you wish to add a user (who is already a part of another Zoho Org account) to your Zoho Org account–the user will need to exit that Organization account first, before joining your Organization.
NoteA few points to ponder before learning about the various MSP roles:
- OpManager Nexus MSP Admin rights alone doesn’t gurantee you any privilege to add a user; you must have the Organization Admin role as well.
- There can be multiple Organization Admins, but only a single Organization Super Admin.
- Organization Super Admin alone can make an existing Org Admin to be a Super Admin.
OpManager Nexus MSP Role
Based on specific roles, OpManager Nexus lets you have complete or limited control over the access levels of various customer accounts in your OpManager Nexus MSP account. There are two roles in OpManager Nexus MSP account–MSP Admin and MSP Operator. Being the MSP Admin of your OpManager Nexus MSP account gives you complete control over your MSP and other Customer accounts. The following are the user roles in OpManager Nexus, which can be entailed to a particular contact:
- MSP Admin: If you’ve created the OpManager Nexus MSP account, you’ll be the default Org Super Admin for your Organization and MSP Admin for your OpManager Nexus account. You will also have the complete operational and management control over these accounts.
- MSP Operator: MSP Operator can only manage customers as Admins in Customer Accounts. You'll have Read-only permission in the OpManager Nexus MSP account and will be able to view only the associated Customers and Customer Groups.
The following table explains the MSP Admin and MSP Operator Roles and their related privileges in detail:
| Function/Roles | MSP Admin | MSP Operator |
| Add/Edit/Delete Monitor in Customer Accounts | Read and Write | No Access (until associated) |
| Access Customer Account Dashboard in MSP Client | Read and Write (until associated) |
No Access (until associated) |
| MSP NOC View | YES (Until associated) |
YES (Until associated) |
| Alarms View Management | Read and Write (until associated) |
Read and Write (until associated) |
| Add/Edit MSP Users | Read and Write | View |
| Add/Edit MSP Customers | Read and Write | View |
| Upgrade/Downgrade/Terminate MSP Customer Accounts | Read and Write | No Access |
| Customize MSP Account Settings | Read and Write | View |
| Upgrade/Downgrade/Terminate Account | Read and Write | No Access |
| Purchase Add-ons and alert credits, Raise Purchase Orders | Read and Write | No Access |
| Add/Edit MSP Customer Subscriptions | Read and Write | View |
| Alert Notifications | YES | YES |
Custom Role for MSPs
Easily manage user access and permissions across portal and customer levels with tailored custom role in your MSP setup.