Manage accounts and customers

Overview

Cisco GMM uses multitenant "Organizations" that allow Service Providers (SPs) to create "Accounts". Accounts can be used to resell services to individual "Customers", or to separate and organize the SP's organizations. 

Each "organization" is a separate administrative domain that allows companies to securely manage the devices and administrative features for their company, or on behalf of other companies.

Accounts are not inherited from the parent organization. Accounts must be explicitly added to a organization to be able to manage the organization.  

Organization types

Org	Example	Description
Service Provider (SP)	Cisco	SPs can create accounts for partners and resellers. Cisco is currently the only SP. SPs can also add users for the Account organizations.
Accounts	Fleet Trucking	Organizations at the "Account" level can: 1) Add customers to provide Cisco GMM services to other organizations. 2) Manage the devices, data and users for their account and for their customers. An account is created by a service provider.
Customers	Local Trucking	A customer admin user can manage their own organization's devices, data and users.

Tip: You can only see the organizations and information for which you have
access.

User roles

Access privileges are defined by a user's role. Users are created for Account or Customer organizations.

The Admin and Operator roles are available by default. Contact Cisco support using Help -> Contact Us to make non-default roles available to your organization.

User role	Description
Admin (Default)	Full read/write privileges. Admin users can manage the devices, data and users for their organization, and lower level organizations.
Operator (Default)	Read-only privilege. Operators have limited access to view device status and data.
Data Admin	Users with this role can manage all data flow features, such as data policies, destinations, rule sets, fog apps etc. Data admins cannot claim or unclaim gateways.
Managed Service Operator	Users with this role can run diagnostics and remote-access for support from the Cisco Managed Services team. All other features and information are read-only.
Product Owner	Users with this role can manage users and claim and unclaim gateways in an organization.
Stager	Users with this role can claim and unclaim gateways only. All other features in the organization are read-only.
Support	Users with this role can run gateway diagnostics from the cloud. Everything else is read-only

Create "Account" organizations and users

Service Provider admins can create "Account" organizations and users.

Tip: Before you begin, Request an initial account, if necessary.

1. Log in to the Cisco GMM admin console.

2. From the top left menu, select the SP organization name.

3. Click Admin > Accounts.

4. Enter the account name and click Submit.

To create users for the new Account organization:

1. From the top left menu, select the new Account organization name.

2. Click Admin > Users.

3. Click Add user and enter a name and email.

4. Select a user role and click Submit.
   An auto-generated email will be sent to the user with instructions to
   activate their new account.

Create "Customer" organizations

Account organizations can provide GMM services to other companies by
creating "Customer" organizations.

Account admins can also manage the devices, data and users for those customers.

Customer admins can manage their own devices, data and users, or an account
admin can do it for them. Customers cannot create new Customers and do not see
this option. Customer users can only create additional users for their
organization (if they have admin privileges).

1. From the top left menu, select your Account organization's name.

2. Click Admin > Customers.

3. Enter the Customer organization name and click Submit.

To create users for the new Customer organization:

1. From the top left menu, select the new organization name.

2. Click Admin > Users.

3. Click Add user and enter a name and email.

4. Select a user role and click Submit.
   An auto-generated email will be sent to the user with instructions to
   activate their new account.

Manage organizations and users

Click the organization menu at the top left to view a summary of the accounts
and customers you can access.

1. From the top left menu, select the organization name and click Manage
   Orgs.

2. A summary of the organizations you can access is displayed.

3. Click an organization name to manage the devices, data and users for that
   organization. You can also click .