Creating Administrator Accounts

Context

Three types of administrator accounts are used for logging in to iMaster NCE-Campus, but the three types of administrator accounts have different permissions.

• System administrator: is responsible for managing and maintaining the iMaster NCE-Campus system. A system administrator can create managed service providers (MSPs) and MSP administrators.

  After logging in to iMaster NCE-Campus using the default system administrator account, you can create more system administrator accounts and assign different management objects and operation permissions to them. The adjustment on the account and password policies for the system administrator role is valid for all system administrator accounts.

• MSP administrator: An MSP has professional network maintenance capabilities and is responsible for providing the device preventive maintenance inspection (PMI) and tenant network services to tenants. An MSP administrator can create tenants and tenant administrators.
• Tenant administrator: is responsible for managing the network, accounts, devices, and end user information of the tenant. An MSP administrator can create one or more tenants and tenant administrators. Resources managed by tenants are mutually independent. Tenants with the O&M capability can use the tenant administrator account to manage their respective networks. Tenants without the O&M capability can authorize MSPs to manage networks for them. Irrespective of self-managed or MSP-managed mode, tenants can still manage their own networks.

Large- or medium-sized campus networks are usually built and maintained by tenants themselves, and one tenant is usually created for one campus network. When a tenant deploys and maintains the campus network on its own, the tenant administrator is the main implementer of the network and the MSP administrator simply assists in the deployment work.

In this document, the deployment roadmap and process in each networking scenario assume that the tenant builds and maintains the network on its own, and the tenant administrator is the main implementer. In the scenario where the MSP performs managed services, the MSP administrator is the main implementer and performs the same tasks as the tenant administrator in the MSP administrator portal.

Configuration Tasks

Creating an MSP Administrator

1. Log in to iMaster NCE-Campus as a system administrator.

   You need to change the default password upon the first login. Temporary passwords set when new MSP administrator and tenant administrator accounts are created need to be changed upon first login.

2. On the main menu, choose MSP Management > MSP Management > MSP Management, and click Create to create an MSP and an MSP administrator account.

Creating a Tenant Administrator

1. Log in to iMaster NCE-Campus as an MSP administrator.
2. On the main menu, choose Tenant Management > Tenant Management > Tenant Management, and click Create to create a tenant administrator account.

Authorizing an MSP to Maintain Tenant Services

• In the MSP administrator portal, enable Authorize MSP when creating a tenant administrator (for details, see Creating a Tenant Administrator).

• In the tenant administrator portal, authorize the MSP to manage services.
  1. Log in to iMaster NCE-Campus using a tenant administrator account.
  2. Choose System > User Management > Tenant Information. In the Authorization Information area, enable Authorize MSP.
     • Set permissions on the Work Group tab page. After an MSP administrator accesses the tenant administrator portal using the managed service function, the MSP administrator has the permissions specified for the work group.

     • Click the Role tab and grant permissions to the role. After an MSP administrator accesses the tenant administrator portal using the managed service function, the MSP administrator has the permissions assigned to the role.