Marketplace License / Customer admin

 

With a Marketplace license, you do not require any additional licenses. The running of the software is already included.

1. Request license

1. In the menu, click "Account" and then "Licenses". Click the Plus icon to create a new license.
2. Select the "Marketplace" tile and click on the app (e.g. the oneclick™ customer admin) that users should receive.
3. Give the license any name, enter a quantity accordingly and click Next.
4. If you specifically selected Group License, optionally set limits for access and click Next.
5. In the last step you will get the retail prices listed. Click request license to complete the process.

 

2. Create app configuration and assign app

Note for other Marketplace licenses

The following configuration steps use the oneclick™ Customer admin as an example. Other Marketplace licenses have different configuration options — for some, the app configuration is created automatically.

1. In the menu, click "Apps" and then App configurations.
2. Click on the Plus icon .
3. Select your requested Marketplace license.
4. Give the configuration any name.
   • If you want the user who receives the app to manage all customers select "All available".
   • Select the "Administrator" role to grant full rights when accessing customers. To grant restricted rights instead, select a role with limited permissions — see Set up a customer admin with restricted rights.
   • Optionally, you can add policies like a second factor for this app.
   • Customize the tile as desired for viewing on the oneclick™ Desk.
   • Finish this step by clicking Save.
5. In the menu, click App instances and then click the Plus icon to create a new app instance.
6. Directly select the newly created configuration and click Next.
7. Depending on whether you requested the license as a single or group license, select the users (single license) or the group (group license) that should receive the app. Click Save.

The app is now available. If you have activated the oneclick™ customer admin, you can now create customers.

Which rights apply when accessing a customer?

The rights a customer admin has when accessing a customer are the intersection of two roles: the role selected in the app configuration and the support role of the customer being accessed, which each customer can restrict themselves. A permission only applies when both roles grant it. For more details, see Roles.

Set up a customer admin with restricted rights

A user who receives the customer admin always needs administration rights in your management unit — otherwise they cannot administer customers at all. You define these rights in a role and assign it through a group:

• If the user is a full administrator who also has the Admin app, keep them in the default Administrators group — its Administrator role grants all rights — and additionally assign the customer admin to them.
• If the user should not be a full administrator or does not have the Admin app, first create a dedicated role and assign it to a dedicated group — even if the role has the same permissions as the Administrator role. Do not modify the default Administrators group for this.

Do not remove a customer admin's admin rights

A customer admin must keep their admin rights, otherwise they can no longer administer. To limit them, restrict the role in the app configuration, not the group membership. Only remove the user from the default Administrators group if you grant the necessary admin rights through another group.

To give a customer admin restricted rights — for example, access to all customers but without creating or editing users:

1. Create a role that includes only the permissions the customer admin should have, as described in Create a role. Remove the permissions the customer admin should not have — for example, create, edit, and delete for users.
2. Create a group and assign the new role to it, as described in Groups.
3. When you create the app configuration (step 2 above), select this role instead of Administrator.

Be careful when removing your own rights

If a customer admin removes one of their own permissions, they may not be able to restore it with the same user, because they have revoked the right from themselves. This cannot easily be undone.