Manage DNSFilter account user permissions

MSP client user permissions

MSP client's dashboard user permissions are different than a standard account and MSP dashboard user's permissions listed in this article. Review this alternative article to understand those permissions as well as other important differences for MSP Organizations.

DNSFilter account user types

The DNSFilter dashboard supports these user types.

Type	Details
Owner	Full account permissions. The only account user type that can cancel the organization's DNSFilter account.
Standard Organization Super Admin	A Super Admin has the same permissions as the account Owner, except the ability to cancel the DNSFilter account. Super Admins can: Manage billing information Create, update, and delete policies and deployments Assign user roles, including other Super Admins Configure integrations Access all areas of the DNSFilter account Multiple Super Admins can be assigned per organization, and a single user can hold Super Admin access across multiple organizations. Admins cannot elevate their own role to Super Admin. This restriction maintains administrative accountability.
MSP Organization Super Admin	An MSP Super Admin has the same access as a Standard Organization Super Admin, plus the ability to create and delete Organizations. MSP Super Admins exist only at the MSP dashboard level. They cannot be assigned to individual Organizations or restricted to specific Organizations. Super Admin access provides visibility across the entire MSP account.
Standard Organization Admin	Permissions to manage: Filtering Policies Universal Lists Deployments Integrations Reporting Policy Audit Log Profile settings View-Only Permissions: Organization Settings, e.g. enable/disable SSO; 2FA, Billing & Subscription information
MSP Organization Admin with access to all Organizations	Permissions to manage: Filtering Policies Universal Lists Deployments Add new Organizations, but not remove Billing and Subscription details Integrations Reporting Policy Audit Log Profile settings View-Only Permissions: MSP Settings, e.g. enable/disable SSO; 2FA
MSP Organization Admin access excluding specific Organizations	Permissions to manage: Filtering Policies Universal Lists Deployments Integrations Reporting Policy Audit Log Profile settings View-Only Permissions: MSP Settings, e.g. enable/disable SSO; 2FA
Policies Only	Permissions to edit existing: Filtering Policies View-only Permissions: Universal Lists Deployments Reporting Organization Settings, e.g. enable/disable SSO; 2FA; Profile settings
Read Only	View-only Permissions: Filtering Policies Universal Lists Deployments Reporting Organization Settings, e.g. enable/disable SSO; 2FA; Profile settings

Dashboard User notes

➡️ There is no limit to the amount of users which may be added to the dashboard.

➡️ Once SSO is enabled, add new users via the SSO configuration—the Add User button is disabled.

➡️ A checkmark icon appears next to users who have accepted their invitation. This makes it easy to quickly verify which users have joined the organization.

➡️ Users with more restrictive roles like Read Only or Policies Only have hidden dashboard tabs and panels, e.g. the Integrations panel or the Data Export tab under Tools are not visible.

Resend user invitation

Account users with Admin permissions or higher can resend an organization invitation to a user by selecting the envelope icon under Actions.

If a user's email address already has an associated DNSFilter account, there are two things to note about adding them to an Organization:

Their display name will always match the initial account's name. To update the name, login with that email/password to make the change
The user will not receive an invitation email notification. When they login, the new Organization will be available from the Organization drop down menu

How can we help you?

Search

In this article

MSP client user permissions

DNSFilter account user types

Dashboard User notes

Resend user invitation

Comments