Partner Administrator Roles for Webex for BroadWorks
In both Partner Hub and Control Hub, administration access to settings can be granted to users via the usage of roles. There is a wide variety of roles available, each of which has the ability to grant access to necessary administrative settings while restricting access to settings that aren’t necessary. Depending on the requirements of the organization, you have the option of assigning several roles to a single administrator or multiple administrators, each of whom would have a unique set of roles and access privileges.
There are primarily two types of administration tasks that can need the assignment of responsibilities within a partner business (either a Service Provider or a reseller):
- Manage the parameters that are relevant to the partner organization through the Partner Management system.
- Customer Management entails taking charge of the configurations that are relevant to the many customer organizations that are managed by the partner.
Partner Management Roles
The following organizational and functional roles offer administrative privileges to manage settings for the partner organization itself (the organization titled “My Organization” in Partner Hub). These administrative privileges are only available to users who have been assigned one of the following organizational and functional roles.
-
Full administrator—possesses the ability to see and administer settings pertaining to the partner organization. Have the ability to assign administrative jobs, including roles for managing customers.
-
Read-only administrator—possesses the ability to observe the settings of the partner organization but is unable to modify the settings.
-
Support administrator—Contains both Analytics and Troubleshooting within its reach.
. -
User and device administrator—possesses the ability to manage people, devices, as well as licenses.
-
Device administrator—possesses the ability to manage the devices.
-
Compliance officer—possesses access to user-generated content as well as legitimate stuff.
-
Advanced troubleshooting—Access to participate in live as well as ongoing meetings.
The following table outlines the different levels of access that have been granted to the aforementioned administrators in order to manage the settings of the partner organization.
Full administrator |
Read-only administrator |
Support administrator |
User and device administrator |
Device administrator |
Compliance officer |
Advanced troubleshooting |
|
---|---|---|---|---|---|---|---|
Partner Organization Settings |
|||||||
Assign administrator roles |
✔ |
Read-only |
|||||
Add/Delete users and assign licenses |
✔ |
Read-only |
✔ |
||||
Device management |
✔ |
Read-only |
✔ |
✔ |
|||
Company policy and templates |
✔ |
Read-only |
|||||
Analytics and reports |
✔ |
Read-only |
✔ |
||||
Troubleshooting |
✔ |
Read-only |
✔ |
||||
Licenses and upgrades |
✔ |
Read-only |
✔ |
||||
Organization settings |
✔ |
Read-only |
|||||
App integrations |
✔ |
Read-only |
|||||
Webex site management |
✔ |
Read-only |
|||||
Administrator actions audit log |
✔ |
Read-only |
|||||
Access to user generated content |
✔ |
✔ |
|||||
Legal hold |
✔ |
✔ |
|||||
Access to join in-progress meetings |
✔ |
✔ |
Customer Management Roles
Users in the partner organization are eligible to take on any of the available Customer Management positions listed below. These roles grant the partner permission to manage settings for customer organizations that they are responsible for managing within Partner Hub or Control Hub.
-
Partner full administrator—possesses the ability to manage settings for each and every consumer that the partner oversees. You also have the ability to delegate administrative responsibilities to users who are already part of your company and designate particular clients to be managed by partner administrators.
-
Partner administrator—The user has the ability to manage settings for those customers who were provisioned by the administrator or who have been allocated to the user.
-
Partner read-only administrator—may access the settings for each and every customer that the partner is responsible for managing. Does not have access to change any content.
-
Help desk administrator (Basic)— Can access the Help Desk view (located on the Troubleshooting page of the Partner Hub). Can conduct searches of all clients who fall under the partner’s umbrella across all organizations for the purpose of diagnosing and providing support. This position offers customer organizations that fall under the partner with temporary read access to the system.
-
Help desk administrator (Advanced)—This status offers the same benefits as the Basic role described above, in addition to giving the administrator the ability to seek full administrator access from a customer administrator in order to resolve any issues that may arise.
The table that follows illustrates the access privileges that the aforementioned administrators possess in order to manage settings in Partner Hub and Control Hub on behalf of customer organizations managed by the partner.
Partner full administrator |
Partner administrator |
Partner read-only administrator |
Help desk administrator (Basic) |
Help desk administrator (Advanced) |
|
---|---|---|---|---|---|
Partner Hub Settings |
|||||
Assign administrator roles |
|
||||
Partner analytics and reporting |
|
Read-only |
|||
Branding |
|
Read-only |
|||
Company policy and templates |
|
||||
Create customers |
|
||||
Begin and manage Webex trials |
|
Y |
|||
Customer Organization Settings |
|||||
Customer List |
See all |
See partial |
See all |
See all |
See all |
Assign Customer Admin Roles |
|
Y |
|||
Add / Delete users and assign licenses |
|
Read-only |
Read-only |
Temporary when approved |
|
Device management |
|
Y |
Read-only |
Read-only |
Temporary when approved |
Company policy and templates |
|
Y |
Read-only |
Read-only |
Temporary when approved |
Analytics and reports |
|
Y |
Read-only |
Read-only |
Temporary when approved |
Troubleshooting |
|
Y |
Read-only |
Y |
Y |
Licenses and upgrades |
|
Y |
Read-only |
Read-only |
Temporary when approved |
Organization settings |
|
Y |
Read-only |
Read-only |
Temporary when approved |
App integrations |
|
Y |
Read-only |
Read-only |
Temporary when approved |
Webex site management |
|
Y |
Read-only |
Read-only |
Temporary when approved |
Admin actions audit log |
|
Y |
Read-only |
Read-only |
Temporary when approved |
Access to user-generated content |
Y |
Y |
|||
Legal hold |
|||||
Access to join in-progress meetings |
Y |
||||
Retrieve logs |
Y |
Y |
Assign Roles
- Create an account in the Partner Hub by going to http://admin.webex.com.
- Choose the Customers option, then begin loading the page for My Organization.
- Click the Users tab under the Control Hub and then choose the appropriate user.
- If the user does not already exist in your My Organization account, you can create new administrators by selecting the My Organization tab, clicking the manage users button, and then following the on-screen instructions provided by the wizard. Once the user has been established, you can navigate to the users section of My Organization, click on the relevant user, and provide administrative roles to that person. You will need to set up an alias for Partner Hub if users already have a Common Identity that is defined for services.
- Navigate to the Administrator roles section of the Profile tab, and then click the right-pointing arrow > to expand the display.
- Choose the relevant roles, then click the Save button.
Access to the Partner Hub is automatically granted to the appropriate individuals once administrative tasks are delegated. The help desk can be accessed by administrators by visiting to https://admin.webex.com/helpdesk and logging in with their credentials.
A full administrator in a partner organization has the ability to outsource the responsibilities of being a Partner full administrator, Partner administrator, and Partner read-only administrator by using the Partner Hub Administrators view. This allows the full administrator to focus on other tasks.
Restricted Administrator Mode
Access to the Control Hub is equal to the role entitlements minus the restrictions.
When the Restricted mode is on, access to the following things is denied to customer administrators working for that particular organization:
-
In the Users view, the following settings are not available:
-
Manage Users button is greyed out.
-
Manually Add or Modify Users—There is no way to manually add or modify users, nor is there a CSV import option.
-
Claim Users—not available
-
Auto-assign Licenses—not available
-
Directory Synchronization—Sync settings for the directory cannot be edited (this feature is only available to administrators of the Partner level or higher).
-
User details—There is no ability to change the user’s settings, including their name or email address.
-
Reset Package—There is no reset option for the package type.
-
Edit Services—There is no option available to alter the services (such as Messages, Meetings, and Calling) that are enabled for a user.
-
View Services status—It is not possible to view the complete status of the hybrid services or the software upgrade channel.
-
Primary Work Number—This field is read-only.
-
-
When viewed from the Account perspective, the following configuration options are unavailable:
-
Company Name is read-only.
-
-
In the view of the Organization options, the following options are not accessible to be changed:
-
Domain—Access is read-only.
-
Email—The options for “Email Locale Selection” and “Suppress Admin Invite Email” may only be viewed, not changed.
-
Authentication—No option to edit Authentication and SSO settings.
-
-
The following options are unavailable for customization inside the Calling menu:
-
Call Settings—The App Options Call Priority settings are read-only.
-
Calling Behavior—Settings are read-only.
-
Location > PSTN—The Local Gateway and Cisco PSTN options are hidden.
-
-
Under SERVICES, the options for the Migrations service and the Connected UC service have been disabled.
Customers’ organizations, rather than individual administrators, are the ones who have access to the restricted mode. When this setting is turned on, customer administrators at that organization will see a banner at the top of the Control Hub screen that informs them that this setting is being applied to their account.
Configure Restricted Administrator Mode
Follow the steps below if you are an administrator for a partner company and want to enable or disable this mode for specific customer organizations (the setting is enabled by default).
- Launch Partner Hub, then navigate to the Customers tab.
- Find the appropriate customer organization to select.
- To enable or disable Restricted Administrator Mode, enable or disable the following toggles in the settings view located on the right side of the screen:
If you want to get rid of Restricted Mode for the customer organization, you’ll need to disable the toggle.
Related Articles
- Assign organization roles in Control Hub If you provide customer administrators access to Control Hub, use this article to establish role access for the customer administrators you granted access to.
- Approve External Administrator Request—Client administrators can use this method to provide a partner administrator access to their organization so that the partner administrator can perform external administrator duties. An established Webex organization that purchases Webex services from a partner organization with which they do not have an existing relationship is an illustration of a scenario in which this might be required. Access to the new partner administrator must be approved by the customer administrator before it can be granted to the external administrator.
Change History
Date of Change |
Description of Change |
---|---|
31 March 2023 |
|
08 March 2023 |
|
01 February 2022 |
|