> ## Documentation Index
> Fetch the complete documentation index at: https://docs.msportal.ai/llms.txt
> Use this file to discover all available pages before exploring further.
# Companies Settings
> Manage client companies, users, roles, and permission groups
Companies Settings is the central hub for managing your client companies and their users. It contains four tabs: **Companies**, **Users**, **Roles**, and **Permissions**.
## Accessing Companies Settings
1. Click **Settings** in the sidebar
2. Select the **Companies** icon from the settings navigation
## Tab Overview
Manage your client company list, details, integrations, and company types.
View and manage all company users across every company in one place.
Define organizational job titles like Account Manager or Technician.
Create permission groups that control what company users can access in the portal.
***
## Companies Tab
The Companies tab displays all client companies in your organization with filtering, sorting, and bulk actions.
### Company Information
Each company entry shows:
| Field | Description |
| ---------------- | ---------------------------------------------------------------------------------------------------- |
| **Name** | Company name with parent/child and import source indicators |
| **Status** | Active or Inactive |
| **Industry** | Business sector |
| **Integrations** | Connected PSA/RMM badges (ConnectWise, Halo, Autotask, Syncro, Asio, Cove) |
| **Types** | Every type the company belongs to, manual and PSA-synced (see [Company Types](#company-types) below) |
| **Training** | Premium or Standard training tier |
| **M365** | Microsoft 365 connection status |
| **Contact** | Primary contact name or email |
### Filtering and Searching
Use the built-in filters to narrow down companies:
* **Search** - Filter by company name
* **Status** - Active or Inactive
* **Industry** - Business sector
* **Integrations** - Filter by connected integration (multi-select)
* **Types** - Filter by one or more company types (multi-select). The picker lists every type in use across the tenant, both manual and PSA-synced
### Adding a New Company
Select the **Add Company** button in the top right.
Fill in the company name, industry, and contact information.
Set company-specific configurations like timezone and preferences.
Click **Save** to create the company.
### Importing Companies
Click the **Import** button to import companies from your connected integrations (Halo PSA, ConnectWise, Autotask, Syncro, or Asio).
Changes made in your PSA will sync to MSPortal. Some fields may be read-only if managed by your PSA integration.
### Bulk Actions
Select multiple companies using the checkboxes to perform bulk operations:
* **Assign Roles** - Set account manager or other staff roles for selected companies
* **Set Parent Company** - Establish parent/child company relationships
* **Manage Types** - Add, replace, or remove types on the selected companies (see [Company Types](#company-types) below)
* **Enable/Disable Premium Training** - Toggle Bigger Brains premium training access
### Per-Company Actions
Click the actions menu on any company row to:
* **View Details & Users** - Open the company detail page
* **Edit Company** - Update company information
* **Create Location** - Add a physical location
* **Manage Types** - Add or remove types on this single company
* **Import Users** - Pull users from connected integrations
* **Delete Company** - Remove the company (requires manage permission)
### Company Types
Company **Types** classify each company so reports, ticket templates, and bulk actions can target specific groups of clients. The Types column on the Companies tab shows every type a company belongs to as a badge stack.
Types replace the older **Groups** feature. Any group you previously created carries over as a manual type with the same memberships and template wiring intact. The bulk action and row-level menu now read **Manage Types**.
#### Manual vs PSA-Synced Types
| Source | How it's created | Visual cue | Editable |
| -------------- | -------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | ----------------------------------- |
| **Manual** | Created inside MSPortal from the bulk dialog or a row action | Filled badge | Yes |
| **PSA-synced** | Imported from your PSA's company-type list (ConnectWise, Halo, Autotask, ConnectWise Asio, Syncro) | Outline badge with a "Synced from your PSA" tooltip naming the provider | Read-only here, managed in your PSA |
Companies can hold any number of types simultaneously. A single company can be both a "Managed Services Client" (manual) and a "Production - High Priority" (PSA-synced) at the same time, and template gating, reports, and bulk actions all see both.
#### Adding or Removing Types in Bulk
Tick the checkboxes next to the companies you want to update. Use the search bar or column filters first to narrow the list.
Click the **Manage Types** button in the bulk actions bar.
* **Add** appends the selected types to each company's existing type list
* **Remove** strips the selected types from each company
* **Replace** replaces every manual type on each company with the selected list. PSA-synced types are never touched by Replace, so your sync still owns them
Choose existing types from the picker, or type a new name and click **Create** to add a new manual type inline.
Click **Apply** to update every selected company in one operation.
#### Filtering by Type
Open the **Types** filter in the column header to filter the table to companies that belong to one or more types. The filter is multiselect, so picking three types shows companies that are in any of them.
#### Why Types Matter
* **Ticket templates can be gated by type.** A template for "Managed Services" only appears on the new ticket page when the selected company is in that type. See [Creating Ticket Templates](/user-guides/ticketing/how-to-create-a-ticket-template) for the gating dialog.
* **PSA syncs keep memberships current automatically.** When ConnectWise (or any other PSA) adds, removes, or renames a company's type, MSPortal mirrors the change on the next sync, so reports and template gating stay accurate without anyone touching the settings page.
* **Manual types live alongside synced types.** Use manual types for groupings your PSA does not track (for example "QBR Tier A", "Legacy On-Premise", or internal segmentation) without affecting the PSA-driven types.
***
## Users Tab
The Users tab provides a consolidated view of all company users across every company, with powerful filtering and bulk management capabilities.
Company users are your **clients' users** — the end users at each company who access their own portal. These are separate from your internal MSP team members managed in **Settings > Users & Roles**.
### User Information
Each user entry shows:
| Field | Description |
| --------------------- | --------------------------------------------------------------------------- |
| **User** | Avatar, full name, and job title |
| **Email** | User email address |
| **Company** | Which company the user belongs to |
| **Permissions Group** | The permission group assigned to this user |
| **Source** | How the user was added (Manual, ConnectWise, Halo, Microsoft 365, Autotask) |
| **Status** | Active or Inactive |
| **Last Synced** | Last synchronization date from integration |
### Filtering and Searching
* **Search** - Filter by name or email
* **Company** - Filter by company (multi-select)
* **Permissions Group** - Filter by assigned permission group
* **Source** - Filter by import source
* **Status** - Active or Inactive
### Bulk Actions
Select multiple users using the checkboxes to:
* **Update Permissions Group** - Change the permission group for all selected users
* **Edit Custom Fields** - Batch update custom fields across selected users
* **Send Welcome Email** - Send portal invitation emails to all selected users in one operation
* **Remove Access** - Remove portal access and block re-import for selected users
Select the users you want to invite, then click **Send Welcome Email** in the bulk actions bar. A confirmation dialog shows how many users will receive the email. Click **Send** to deliver the invitations.
The email uses your configured invitation template from **Settings > Email** and includes your tenant branding. Each user receives a personalized email with their name and a link to access the portal.
After sending, a summary shows how many emails were sent successfully and how many failed (if any).
### Per-User Actions
Click the actions menu on any user to:
* **Edit User** - Change permissions, custom fields, or details
* **Send Welcome Email** - Send or resend a portal invitation
* **Impersonate** - View the portal as this user (requires impersonate permission)
* **Remove Access** - Revoke access and block re-import from integrations
***
## Roles Tab
The Roles tab lets you define **organizational job titles** for your company users, such as "Account Manager", "Technician", or "Help Desk".
**Roles are not the same as Permissions.** Roles are simple labels that describe a person's job function. They do **not** control what a user can see or do — that is handled by [Permission Groups](#permissions-tab). See [Understanding the Difference](#understanding-the-difference-roles-vs-permissions) below.
### What Roles Are For
Roles help you categorize and organize company users by their job function. They are useful for:
* **Reporting** - Filter and group users by role in reports
* **Organization** - Quickly understand who does what at each company
* **Communication** - Identify the right contact for different types of issues
### Managing Roles
| Column | Description |
| --------------- | ---------------------------------------------- |
| **Role Name** | The name of the role (e.g., "Account Manager") |
| **Description** | Optional description of the role's purpose |
### Creating a Role
Select the **Add Role** button.
Provide a role name and optional description.
Click **Save** to create the role.
Roles can be edited or deleted from the actions column in the table.
### Auto-Mapping PSA Contact Types to Roles
If you use **Halo PSA** or **Autotask**, MSPortal automatically extracts the manager and contact-type assignments on each synced company and can map them straight to your company roles. This saves you from manually assigning "Account Manager", "Primary Tech", or similar roles to the right MSP users on every company after a sync.
**What gets extracted on sync:**
* **Account Manager** from the Company owner resource (`ownerResourceID`)
Autotask exposes a single owner per company, so one role slot is available per synced company.
Halo exposes up to eight manager slots from each client record. MSPortal reads the following fields:
* **Primary Agent** (`pritech`)
* **Secondary Agent** (`sectech`)
* **Account Manager** (`accountmanagertech`)
* **Regional Manager** (`regmanagertech`)
* **Logistics Manager** (`logmanagertech`)
* **Sales Representative** (`salesreptech`)
* **Account Owner** (`accountownertech`)
* **CXM Lead** (`cxmleadtech`)
**How to set up the mapping:**
After your next Halo or Autotask sync, the Roles tab displays a slot column ("Halo Slots" or "Autotask Slots") showing which PSA slots have been detected.
For every MSPortal role, open the slot column and pick the PSA manager slots that should grant this role. For example, map **Account Manager (Halo)** to your **Account Manager** role in MSPortal. You can map more than one slot to a single role.
After you save, the next sync automatically assigns the matching MSP users to each company in that role. Every future sync reapplies and reconciles assignments, so if someone moves roles in your PSA, MSPortal updates to match.
Contacts with no matching slot on a company are skipped, no role is assigned. A single user can hold multiple slots on the same company, each mapped slot yields a separate role assignment. Unmapped slots are ignored so you can adopt the feature incrementally.
The slot list only shows slots currently in use in your tenant, so you can see exactly which PSA fields are populated across your clients before deciding how to map them.
***
## Permissions Tab
The Permissions tab is where you create and manage **Permission Groups** that control what company users can access and do within their company's portal.
### What Permission Groups Control
Permission groups determine:
* **Which modules** a company user can see (Tickets, Training, Devices, Compliance, etc.)
* **What actions** they can take within each module (Read, Write, or Manage)
* **Which ticket display groups** they have access to
### Permission Levels
Each module supports three levels of access:
| Level | Description |
| ---------- | ----------------------------- |
| **Read** | View data only |
| **Write** | Create and edit records |
| **Manage** | Full control including delete |
Selecting **Manage** automatically enables Read and Write for that module. Selecting **Write** automatically enables Read.
### Global vs Custom Groups
| Type | Description |
| ---------- | ----------------------------------------------------------------------------------------------- |
| **Global** | Built-in permission groups provided by MSPortal. These can be viewed but not edited or deleted. |
| **Custom** | Permission groups you create. Fully editable and deletable. |
### Creating a Permission Group
Select the **Create Permission Group** button.
Enter a name (e.g., "Standard User") and optional description.
Check the permissions for each module. Permissions are organized by resource (Tickets, Meetings, Goals, Training, etc.).
Enable **Default Role** if this group should be automatically assigned to new company users.
Select which ticket display group this permission group has access to.
Click **Save** to create the permission group.
### Common Permission Group Examples
Access to all available modules. Can view and manage their company's data.
Access to tickets, training, and basic features. Cannot manage company settings.
Limited to training courses and compliance acknowledgments.
Can view information but cannot create or modify anything.
***
## Understanding the Difference: Roles vs Permissions
This is an important distinction that affects how you organize and secure your company users.
### Company Roles
**Purpose:** Describe who someone is — their job function.
* Simple labels with a name and description
* Used for organization, reporting, and identification
* Do **not** grant or restrict any access
* Examples: "Account Manager", "Technician", "Help Desk", "CFO"
**Think of it as:** A job title on a business card.
### Permission Groups
**Purpose:** Control what someone can do in the portal.
* Define module-level access (Read, Write, Manage)
* Control which features and data a user can see
* Include ticket display group assignments
* Examples: "Full Access", "Standard User", "Training Only", "View Only"
**Think of it as:** A security badge that opens specific doors.
### How They Work Together
A company user is assigned **both** a Role and a Permission Group:
| Concept | Set In | Controls | Example |
| -------------------- | --------------- | -------------------------- | ----------------- |
| **Role** | Roles tab | Organization and reporting | "Account Manager" |
| **Permission Group** | Permissions tab | Portal access and actions | "Full Access" |
For example, a user might have the role **Account Manager** (describing their job) and the permission group **Full Access** (granting them access to all modules). Another user might also be an **Account Manager** but with a **View Only** permission group if they only need to review information.
Roles and Permission Groups are independent. Changing a user's role does not affect their permissions, and changing their permission group does not affect their role.
***
## Required Permissions
To manage Companies Settings, your tenant role needs:
| Permission Level | Capabilities |
| ---------------------------------------- | -------------------------------------------------------------- |
| **Read** (`read_settings_companies`) | View companies, users, roles, and permission groups |
| **Write** (`write_settings_companies`) | Create and edit companies, users, roles, and permission groups |
| **Manage** (`manage_settings_companies`) | All of the above, plus delete |
## Best Practices
* **Start with fewer permission groups** - Create broad groups first, then add specific ones as needed
* **Use roles for reporting** - Assign roles consistently to enable useful reporting by job function
* **Review permissions regularly** - Audit permission groups periodically to ensure appropriate access
* **Keep company data current** - Regularly update company details and verify contacts
* **Use consistent naming** - Establish naming conventions for companies, roles, and permission groups
## Related Resources
* [Users & Roles](/user-guides/settings/users-roles) - Manage your internal MSP team roles
* [Company Overview](/user-guides/company-overview/index) - Company dashboards
* [Integrations](/user-guides/integrations/index) - PSA and RMM company sync
* [Onboarding: Permission Groups](/user-guides/getting-started/onboarding/company-permission-groups) - Initial permission group setup
* [Onboarding: Company Roles](/user-guides/getting-started/onboarding/company-roles) - Initial role setup