MSP staff

MSP staff are logins in your own organisation that can work in your clients. Each one has Admin or Technician access. Only MSP admins can open the MSP staff page.

What admins and technicians can do

	Admin	Technician
See the Clients page and open any client	Yes	Yes
Run a client’s programme: staff, campaigns, reports, settings and whitelisting	Yes	Yes
Add clients	Yes	No
Change a client’s alert settings and confirm permission to test	Yes	No (can view)
Invite, change or remove a client’s logins, and manage its roles	Yes	No
Manage billing for a client that still pays for its own subscription	Yes	No
Open MSP staff and MSP settings	Yes	No
See the MSP getting started guide	Yes	No

Only your organisation’s billing owner can change your plan, which covers you and all your clients. Other MSP admins can view it but can’t change it. The same goes for the Billing email in MSP settings. See How billing works.

Access covers every client. You can’t limit a technician to particular clients.

MSP access only applies inside clients and to the MSP pages. In your own organisation, each person keeps the role they have there under Settings → Users & Roles.

When OutPhish turned your organisation into an MSP account, its organisation admins and billing owner became MSP admins.

Give someone MSP access

The MSP staff page lists every login in your own organisation, so the person needs a login there first.

1. Check you’re working in your own organisation, not a client. The name at the top of the menu should say MSP under it. If you’re in a client, click Back to your organisation’s name on the blue banner.
2. Go to Settings. Under Users & Roles, click Invite User.
3. Enter their Email Address. It must use your organisation’s email domain: the same domain as the Primary Email in your organisation’s settings.
4. Choose their Role in your own organisation, then click Send Invitation.
5. Once they’ve accepted the invitation, go to MSP staff.
6. In their row, choose Technician or Admin under MSP access, then click Save.

Caution

If you invite someone while you’re working in a client, they become a login for that client, not a member of your team.

For more on invitations and roles, see Users and roles.

Change or remove someone’s access

1. Go to MSP staff.
2. In their row, choose a different level under MSP access. Choose No access to take their access away.
3. Click Save.

The change applies from their next page. If they were working in a client when you removed their access, they’re moved back to your own organisation.

No access doesn’t remove their login. They can still use your own organisation with the role they have there. To remove the login completely, use Settings → Users & Roles in your own organisation.

Your MSP account always needs at least one admin. If you try to change the last admin, OutPhish shows “An MSP needs at least one admin.”