Ask the Community
Groups
Creating Limited User Roles/Scopes for VSA Users on SaaS - Connect IT Community | Kaseya
<main> <article class="userContent"> <h3 data-id="question">Question</h3> <p>I'd like to assign limited User Roles and Scopes to my VSA users. What's the best way to do this?</p> <h3 data-id="answer">Answer</h3> <p>You can follow these steps for guidance, and if further questions/issues arise, please contact Kaseya Support via <a href="https://kaseya.vanillacommunities.com/kb/articles/aliases/kaseya/hc/en-gb/requests/new" rel="noopener nofollow">this link</a>.</p> <ul><li>Navigate to <strong>System > User Security > Users </strong>to confirm what Users you already have, and identify what users would need access to what.</li> <li>Once that's done, switch to the <strong>User Roles </strong>page, and here you'd want to create a new User Role by clicking the <strong>+New </strong>button.</li> <li>Give it a name, and select "Kaseya Advanced" from the Role Type drop-down menu, save the changes:</li> </ul><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/F3MFY0LUARM8/mceclip0.png" alt="image" class="embedImage-img importedEmbed-img"></img></p> <ul><li>Upon saving this, go ahead and select the newly created role, which should have no users under the <strong>Members </strong>tab, etc. Before adding users to this User Role, click on the <strong>Access Rights </strong>tab to enable/disable modules in the VSA as needed:</li> </ul><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/XH34KGV6OAL3/mceclip1.png" alt="image" class="embedImage-img importedEmbed-img"></img></p> <ul><li>Save the changes, and click on the <strong>Members </strong>tab at this time, click <strong>+Assign </strong>and add the VSA users who will be part of this new User Role:</li> </ul><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/5TRLRVW3M2LF/mceclip0.png" alt="image" class="embedImage-img importedEmbed-img"></img></p> <p><strong>Note: </strong>If the users that are going to be part of the role haven't been created yet, simply skip the above step, and proceed to the next one. Also, the <strong>Role Types </strong>tab will simply offer the option to add/remove the role types that are available to you:</p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/90XC0I4BMZCO/mceclip7.png" alt="image" class="embedImage-img importedEmbed-img"></img></p> <ul><li>Now, we will need a Scope to go with the new User Role. Navigate to the <strong>Scopes </strong>page and select <strong>+New</strong>.</li> <li>Name the Scope and click <strong>Save</strong>:</li> </ul><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/VWSYZGK4QT2K/mceclip2.png" alt="image" class="embedImage-img importedEmbed-img"></img></p> <ul><li>Select the newly created Scope, which will have no entries in any of its tabs:</li> </ul><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/B6QUVJOIU6DN/mceclip3.png" alt="image" class="embedImage-img importedEmbed-img"></img><strong>Note: </strong>Here you can do the same thing you did with the User Role, add members as needed, as long as their user accounts have already been created.</p> <ul><li>Now, in order to add specific Organizations, Machines Groups, or individual Machines, simply navigate to the desired tab, and click the <strong>+Assign </strong>button to choose from the list of Machine Groups:</li> </ul><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/EYN0JIVUST5J/mceclip4.png" alt="image" class="embedImage-img importedEmbed-img"></img></p> <ul><li>Select whichever Machine Group is needed, or multiple ones (if applicable), and click <strong>Save</strong>.</li> </ul><p><strong>Note: </strong>The above step will ensure that the VSA users assigned to this Scope will only have access to the Machine Groups you picked in the above step.</p> <ul><li>Now, if you created User Roles/Scopes without having VSA Users in place, simply go to the <strong>Users </strong>page and create new ones here - you will see from the drop-down menus, the newly created User Role/Scope:</li> </ul><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/8UTMXHCE0FVB/mceclip5.png" alt="image" class="embedImage-img importedEmbed-img"></img></p> <ul><li>Fill it out, and save the changes.</li> <li>You should see the User Role/Scope assigned to this VSA account under the <strong>Roles </strong>and <strong>Scopes </strong>tabs:</li> </ul><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/HPLSJCP2CA5H/mceclip6.png" alt="image" class="embedImage-img importedEmbed-img"></img></p> <p><strong>Note: </strong>Here you can add and remove User Roles/Scopes as needed.</p> </article> </main>