Skip to main content
Companies Settings is the central hub for managing your client companies and their users. It contains four tabs: Companies, Users, Roles, and Permissions.

Accessing Companies Settings

  1. Click Settings in the sidebar
  2. Select the Companies icon from the settings navigation

Tab Overview

Companies

Manage your client company list, details, integrations, and company groups.

Users

View and manage all company users across every company in one place.

Roles

Define organizational job titles like Account Manager or Technician.

Permissions

Create permission groups that control what company users can access in the portal.

Companies Tab

The Companies tab displays all client companies in your organization with filtering, sorting, and bulk actions.

Company Information

Each company entry shows:
FieldDescription
NameCompany name with parent/child and import source indicators
StatusActive or Inactive
IndustryBusiness sector
IntegrationsConnected PSA/RMM badges (ConnectWise, Halo, Autotask, Syncro, Asio, Cove)
GroupsAssigned company groups
TrainingPremium or Standard training tier
M365Microsoft 365 connection status
ContactPrimary contact name or email

Filtering and Searching

Use the built-in filters to narrow down companies:
  • Search - Filter by company name
  • Status - Active or Inactive
  • Industry - Business sector
  • Integrations - Filter by connected integration (multi-select)
  • Groups - Filter by company group (multi-select)

Adding a New Company

1

Click Add Company

Select the Add Company button in the top right.
2

Enter Company Details

Fill in the company name, industry, and contact information.
3

Configure Settings

Set company-specific configurations like timezone and preferences.
4

Save

Click Save to create the company.

Importing Companies

Click the Import button to import companies from your connected integrations (Halo PSA, ConnectWise, Autotask, Syncro, or Asio).
Changes made in your PSA will sync to MSPortal. Some fields may be read-only if managed by your PSA integration.

Bulk Actions

Select multiple companies using the checkboxes to perform bulk operations:
  • Assign Roles - Set account manager or other staff roles for selected companies
  • Set Parent Company - Establish parent/child company relationships
  • Set Company Groups - Organize companies into groups
  • Enable/Disable Premium Training - Toggle Bigger Brains premium training access

Per-Company Actions

Click the actions menu on any company row to:
  • View Details & Users - Open the company detail page
  • Edit Company - Update company information
  • Create Location - Add a physical location
  • Import Users - Pull users from connected integrations
  • Delete Company - Remove the company (requires manage permission)

Users Tab

The Users tab provides a consolidated view of all company users across every company, with powerful filtering and bulk management capabilities.
Company users are your clients’ users — the end users at each company who access their own portal. These are separate from your internal MSP team members managed in Settings > Users & Roles.

User Information

Each user entry shows:
FieldDescription
UserAvatar, full name, and job title
EmailUser email address
CompanyWhich company the user belongs to
Permissions GroupThe permission group assigned to this user
SourceHow the user was added (Manual, ConnectWise, Halo, Microsoft 365, Autotask)
StatusActive or Inactive
Last SyncedLast synchronization date from integration

Filtering and Searching

  • Search - Filter by name or email
  • Company - Filter by company (multi-select)
  • Permissions Group - Filter by assigned permission group
  • Source - Filter by import source
  • Status - Active or Inactive

Bulk Actions

Select multiple users using the checkboxes to:
  • Update Permissions Group - Change the permission group for all selected users
  • Edit Custom Fields - Batch update custom fields across selected users
  • Remove Access - Remove portal access and block re-import for selected users

Per-User Actions

Click the actions menu on any user to:
  • Edit User - Change permissions, custom fields, or details
  • Send Welcome Email - Send or resend a portal invitation
  • Impersonate - View the portal as this user (requires impersonate permission)
  • Remove Access - Revoke access and block re-import from integrations

Roles Tab

The Roles tab lets you define organizational job titles for your company users, such as “Account Manager”, “Technician”, or “Help Desk”.
Roles are not the same as Permissions. Roles are simple labels that describe a person’s job function. They do not control what a user can see or do — that is handled by Permission Groups. See Understanding the Difference below.

What Roles Are For

Roles help you categorize and organize company users by their job function. They are useful for:
  • Reporting - Filter and group users by role in reports
  • Organization - Quickly understand who does what at each company
  • Communication - Identify the right contact for different types of issues

Managing Roles

ColumnDescription
Role NameThe name of the role (e.g., “Account Manager”)
DescriptionOptional description of the role’s purpose

Creating a Role

1

Click Add Role

Select the Add Role button.
2

Enter Details

Provide a role name and optional description.
3

Save

Click Save to create the role.
Roles can be edited or deleted from the actions column in the table.

Permissions Tab

The Permissions tab is where you create and manage Permission Groups that control what company users can access and do within their company’s portal.

What Permission Groups Control

Permission groups determine:
  • Which modules a company user can see (Tickets, Training, Devices, Compliance, etc.)
  • What actions they can take within each module (Read, Write, or Manage)
  • Which ticket display groups they have access to

Permission Levels

Each module supports three levels of access:
LevelDescription
ReadView data only
WriteCreate and edit records
ManageFull control including delete
Selecting Manage automatically enables Read and Write for that module. Selecting Write automatically enables Read.

Global vs Custom Groups

TypeDescription
GlobalBuilt-in permission groups provided by MSPortal. These can be viewed but not edited or deleted.
CustomPermission groups you create. Fully editable and deletable.

Creating a Permission Group

1

Click Create Permission Group

Select the Create Permission Group button.
2

Name and Describe

Enter a name (e.g., “Standard User”) and optional description.
3

Configure Permissions

Check the permissions for each module. Permissions are organized by resource (Tickets, Meetings, Goals, Training, etc.).
4

Set as Default (Optional)

Enable Default Role if this group should be automatically assigned to new company users.
5

Assign Ticket Display Group (Optional)

Select which ticket display group this permission group has access to.
6

Save

Click Save to create the permission group.

Common Permission Group Examples

Full Access

Access to all available modules. Can view and manage their company’s data.

Standard User

Access to tickets, training, and basic features. Cannot manage company settings.

Training Only

Limited to training courses and compliance acknowledgments.

View Only

Can view information but cannot create or modify anything.

Understanding the Difference: Roles vs Permissions

This is an important distinction that affects how you organize and secure your company users.

Company Roles

Purpose: Describe who someone is — their job function.
  • Simple labels with a name and description
  • Used for organization, reporting, and identification
  • Do not grant or restrict any access
  • Examples: “Account Manager”, “Technician”, “Help Desk”, “CFO”
Think of it as: A job title on a business card.

How They Work Together

A company user is assigned both a Role and a Permission Group:
ConceptSet InControlsExample
RoleRoles tabOrganization and reporting”Account Manager”
Permission GroupPermissions tabPortal access and actions”Full Access”
For example, a user might have the role Account Manager (describing their job) and the permission group Full Access (granting them access to all modules). Another user might also be an Account Manager but with a View Only permission group if they only need to review information.
Roles and Permission Groups are independent. Changing a user’s role does not affect their permissions, and changing their permission group does not affect their role.

Required Permissions

To manage Companies Settings, your tenant role needs:
Permission LevelCapabilities
Read (read_settings_companies)View companies, users, roles, and permission groups
Write (write_settings_companies)Create and edit companies, users, roles, and permission groups
Manage (manage_settings_companies)All of the above, plus delete

Best Practices

  • Start with fewer permission groups - Create broad groups first, then add specific ones as needed
  • Use roles for reporting - Assign roles consistently to enable useful reporting by job function
  • Review permissions regularly - Audit permission groups periodically to ensure appropriate access
  • Keep company data current - Regularly update company details and verify contacts
  • Use consistent naming - Establish naming conventions for companies, roles, and permission groups