Understanding Permission Groups
Permission Groups are different from both tenant roles and company roles:| Concept | For | Purpose |
|---|---|---|
| Tenant Roles | Your internal MSP team | Control staff access to MSPortal features |
| Permission Groups | Your clients’ users | Control company user access to the portal |
| Company Roles | Your clients’ users | Organizational labels (job titles) — do not control access |
Permission Groups control access. Company Roles are just organizational labels. A user is assigned both independently.
What You’ll Configure
- Group Names - Create groups like “Full Access”, “Standard User”, “View Only”
- Module Access - Which modules company users can see (Tickets, Training, Devices, etc.)
- Permission Levels - What actions users can take: Read, Write, or Manage
- Ticket Display Groups - Which ticket categories are visible to this group
- Default Group - Which group is automatically assigned to new users
Steps to Complete
Navigate to Permission Groups
Click Go to Settings in the onboarding wizard, or go to Settings > Companies > Permissions.
Review Default Groups
MSPortal includes built-in global permission groups. Review these to understand the structure.
Create Custom Groups (Optional)
Click Create Permission Group to create a new group for specific client needs.
Configure Module Access
For each group, select the permission level (Read, Write, or Manage) for each module.
Permission Levels
Each module supports three levels of access:| Level | Description |
|---|---|
| Read | View data only |
| Write | Create and edit records (includes Read) |
| Manage | Full control including delete (includes Read and Write) |
Common Permission Group Examples
Full Access
Access to all available modules. Can view and manage their company’s data.
Standard User
Access to tickets, training, and basic features. Cannot manage company settings.
Training Only
Limited to training courses and compliance acknowledgments.
View Only
Can view information but cannot create or modify anything.
Available Modules for Company Users
- Tickets - Submit and view support tickets
- Training - Access training courses and track progress
- Devices - View device inventory (if enabled)
- Compliance - View compliance status and complete tasks
- Dashboard - Access company dashboard
- Meetings - View and manage meetings
- Goals - View and track goals
Manual Completion
This step requires manual completion. Click Mark Complete in the wizard when you’ve finished setting up your permission groups.Related Documentation
- Companies Settings - Full companies settings reference including all four tabs
- Company Roles - Organizational role setup (next step)