Managing Child Organizations
As a Flexera Managed Service Provider (MSP), you can create your own customer organizations (tenants). This allows you to have a parent-child relationship where your organization (the MSP parent) is a Flexera One organization with the MSP features, and the Flexera One customer organizations (MSP children) are child organizations with customer capabilities across the Flexera One family of products.
Your organization (the MSP parent) can manage child organizations using the Flexera One UI or using the MSP Customer API. Your child organizations may also have their own respective child organizations.
Consider the following:
-
Parent organization—A system owned by an MSP, enabling it to manage its child organizations.
-
Child organization—A customer's system that is managed by the MSP.
-
A child organization of an MSP can also be a parent organization for their respective customers.
This section includes the following topics:
Each Child Organization Requires at Least One Owner
Child organizations require at least one owner. An owner is a user in the child organization who can manage all aspects of that organization.
To add new users in Flexera One in order to give them an authentication mechanism for using the system, see Adding New Users.
We recommend granting administrators the Manage organization role. With this role, the administrator has full admin access to all available capabilities.
| Role Name | Description |
|---|---|
| Manage organization | Organization-level super admin role in Flexera One. This role has all possible permissions within the organization. |
To manage the child organizations, you must have the Manage MSP Customer or Manage organization role.
Capabilities Available
As the parent organization, you can only assign the capabilities that are available to your organization, to your child organizations. If you require capabilities that are unavailable, contact Flexera Support.
The Managed Service Provider capability is only available to the MSP parent organization to assign to child organizations, which enables child organizations to manage their own child organizations. You can assign this capability to child organizations only if your organization is a parent organization that is not managed by another parent.
When your organization's capabilities expire, they are no longer available to your organization or any of your child organizations.
If your current capabilities are due to expire, ensure that you renew them so that your child organizations retain the capabilities you have assigned to them.
For more information on the capabilities required by MSPs, see Capabilities To Be Assigned to the MSPs.
Groups
Groups let you assign automation policies to multiple child organizations. The Policy Manager enables MSPs to apply, manage, and monitor policies across their child organizations by using tags to group organizations. By using the Policy Manager, MSPs can ensure consistent policy enforcement, streamline policy management, and maintain compliance across their child organizations. From the Policy Manager, MSPs can view applied policies, monitor their status, and adjust policy settings as needed. For more information, see Managing and Using the Policy Manager and Applying Policies.