Chapter 9 Managing customer cloud services The Customers page lists the cloud services you have created for your customers and their status. You use this page to perform the following tasks: Create a new cloud service for an organization. Disable and enable a cloud service. Log in as a system administrator to a customer s cloud service. You must be a sysadmin or a member of a role that has the Customer Management permission to view the contents of the Customers page and create, disable, and log in to a customer s cloud service. The Customer page is only displayed in Admin Portal on Managed Service Provider accounts. It is not displayed in customer accounts. This chapter contains the following topics: "About customer cloud services" on page 9-153 "Creating an cloud service for a customer" on page 9-154 "Disabling and enabling a customer cloud service" on page 9-155 "Logging in to a customer cloud service" on page 9-156 "Creating roles that can create and manage customer cloud services" on page 9-156 About customer cloud services A customer cloud service is a full implementation of the Samsung SDS CellWe EMM identity platform. The customer identity platform has the following high-level features: The customer s cloud service has its own unique customer ID and login suffix. The system administrators have full control over the users, apps, devices, roles, etc. in their cloud service. The user accounts, policy sets, roles, enrolled devices, etc. are unique to that cloud service. Only Managed Service Providers (MSPs) have the ability to create cloud services for customers. Administrators for the customer s cloud service, for example, cannot create additional cloud services. When you create an cloud service for a customer, a MSP administrator account mspadmin@<new login suffix> is created on the customer s cloud service. This 153
Creating an cloud service for a customer account lets you log in to the customer s cloud service with full system administrator privileges. This user account cannot be deleted. Creating an cloud service for a customer You create a cloud service for a customer from the Customers page in Admin Portal. Fully preparing a cloud service for a customer is a two-part process: First, you create the cloud service for the organization. Second, you log in to it to configure the basic settings, create, minimally, a system administrator account for the customer, and then invite that user to log in to their cloud service. Creating the cloud service To create the account, you enter the email address and a user name, phone number, job title, company, etc. for the customer. This person does not need to be an administrator and does not have any special privileges in the new cloud service. The login suffix in the email account is the default login suffix for new user accounts. If that login suffix is already in use by another customer, it cannot be re-used, and the cloud service automatically appends a number to make it unique. The full login suffix (that is, with the number) then becomes the default login suffix for new user accounts in that cloud service. You can create additional login suffixes by logging into the customer s cloud service and using the Login Suffix tab in the Settings tab in Admin Portal see "Using login suffixes" on page 1-20. The new cloud service is added to the Customers page. To continue the second preparation phase, you log in to the new cloud service from this page. To create a cloud service for an organization: 2 Click Create Customer. 3 Fill in all of the fields for the customer account. 4 Select an cloud service location. Click the drop-down menu and select the cloud service location that is closest to the organization s offices. 5 Click Submit. Cloud Manager user s guide 154
Disabling and enabling a customer cloud service Preparing a cloud service for customer take over After you create an cloud service, it has only one account mspadmin, the Default Policy settings are applied to all users, and the General Options (see "Customizing cloud service user interfaces" on page 1-3) are set to the default values. At this point, only you can log in to Admin Portal for this cloud service. Minimally, you should create one user account for the customer, add it to the System Administrator role, and then invite that user to log in to the cloud service. You do this by logging in to the cloud service you just created (see "Logging in to a customer cloud service" on page 9-156) and then do the following: 1 Create an account for the customer s IT administrator. See "Adding Samsung SDS CellWe EMM user service accounts" on page 1-9 for the details. 2 Add that account to the System Administrator role. See "Creating cloud service administrators" on page 1-6 for the details. 3 Inviting the administrators to log in to their cloud service. See "Sending invitations to users" on page 1-14 for the details. The invitation logs the user in to the user portal. However, because the account is a member of the System Administrator role, the user can open Admin Portal from the user portal. Alternatively, you can more fully configure the cloud service for the customer. For example, you can do the following to help the customer get started faster: Customize the user interface with the customer s colors and logo (see "Customizing cloud service user interfaces" on page 1-3). Modify the default policy set or create new policy sets (see "Managing policies" on page 1-1). Add default web and mobile applications (see "Adding web applications by using Admin Portal" on page 1-11 and "Adding and deploying mobile applications using Admin Portal" on page 1-19). Disabling and enabling a customer cloud service By default, a customer s cloud service is enabled when you create it. You can disable but you cannot delete a customer s cloud service. The current state of the cloud service is shown in the Status column. Disabling a cloud service has the following results: You cannot log in to Admin Portal for the customer s cloud service. Chapter 9 Managing customer cloud services 155
Logging in to a customer cloud service The customer s administrators cannot log in to Admin Portal. The customer s users cannot log in to the user portal. On the users devices, the Samsung SDS CellWe EMM client remains installed, however, single sign-on is not provided for the web applications. If the customer installs cloud connectors, the cloud connector blocks all communications with the cloud service. The listing remains on the Customers page so that you can enable it again. To disable a customer s cloud service: 2 Click the customer s check box. 3 Expand the Actions menu and click Disable. To enable a disabled account, repeat the procedure and click Enable. Logging in to a customer cloud service When you log in to a customer s cloud service from the Customers page, you are logged in using the mspadmin account and have system administrator permissions. When you log in to customer s cloud service, the Admin Portal session is opened in a separate tab. The top area of the new window displays the customer name to distinguish that session from your own Cloud Manager session. To log in to a customer s cloud service: 2 Click the customer s check box. 3 Expand the Actions menu and click Login. You are automatically authenticated to the customer s Admin Portal using the mspadmin account. Creating roles that can create and manage customer cloud services Only members of the System Administrators role or a cloud service role that has the Customer Management administrative right can view, create, disable or log in to customer cloud services. You create roles and add administrative rights to them from the Roles page in Admin Portal. See "Creating a role" on page 1-3 for the details. Cloud Manager user s guide 156
Creating roles that can create and manage customer cloud services The Customer Management administrative right is only available on Managed Service Provider accounts. For all other accounts, this administrative right is not displayed. For example, the administrative rights available when your customer s system administrator lists the Administrative Rights does not include Customer Management. See the procedure, "To create a role:" on page 1-3 to continue and then go to "Creating cloud service administrators" on page 1-6 to add the administrative rights that allow the user to log in to Admin Portal. To give a role the ability to create, disable, and log in to customers cloud services, add the Customer Management administrator right to the selected role. Chapter 9 Managing customer cloud services 157