Skip to main content
A Company user’s Permissions Group decides what that person can do in the portal. This guide is for MSP staff who manage Company users. Company administrators ask their IT provider to change access. They cannot manage users or permission roles themselves.

​
Before you start

  • You need write access to Company users in Users & Roles. Without it, user names are not clickable and the Update Permissions action is missing.
  • The permissions group you want must already exist. Company users can only be assigned Company-scoped groups. To create one, see Create and edit permission roles.
  • Team Roles are a separate feature. They are not the Permissions Group in the Company user editor.

​
Choose the kind of change

​
Change one user

1

Open Company Users

Go to Settings > Users & Roles and open the Company Users tab. Use the company selector and the table filters to find the person. Check the company and email as well as the name.
2

Open the user

Click the user’s name, or open the row’s menu and click Edit User. The Edit Company User dialog opens.
3

Choose the permissions group

Under Permissions, open Permissions Group and pick the group. Nothing is saved yet.
4

Save

Click Save Changes. A toast says User updated successfully. The Permissions Group column in the table shows the new group.
The dialog also holds email, company, location and custom fields. A change to the email updates the user’s sign-in. Moving the user to another company is a separate change from the role. Review those fields before you save.

​
Update several users

1

Select the users

On the Company Users tab, filter to the right company and users, then check each user’s box. The selected count shows in the table. If you select every matching result across pages, the count covers all of them.
2

Open Update Permissions

Open the Actions menu for the selection and click Update Permissions. The Bulk Update Permissions dialog opens.
3

Choose the permissions group

Open Permissions Group and pick the group to apply to every selected user.
4

Save

Click Save. A toast says Updated permissions for N users. Check the table to confirm.
The dialog starts on No permissions group. Saving it with that choice removes the role from every selected user. Pick the group you want before you click Save. A toast says Removed permissions group from N users when it clears them.

​
Check the result

Confirm the group in the Permissions Group column. Then ask the Company user to reopen the area they use. If they still see old access, ask them to sign out and back in. A permissions group is only part of what a user can reach. The company, enabled modules, integrations and record visibility also apply. A role does not create missing data or turn on an integration.

​
Troubleshooting

​
Frequently asked questions

No. The MSP manages Company users. The administrator asks their IT provider for the change.
No. Picking a different group for one user changes only that user. Editing the group’s permissions changes everyone assigned to it.
Yes. Create or duplicate a role, add the permissions, and assign that role to the person.
No. Click Save Changes for one user or Save in the bulk dialog. Cancel closes the dialog without saving.
It removes the user’s role assignment. It does not delete the user.
No. Company roles control the Company portal. They do not make a Company user MSP staff.