- Home
- /
- Article
Assign external administrator roles in Control Hub
You can add anyone outside your organization as an external administrator. You can also manage external administrator privilages and define them as an external full administrator or an external read-only administrator.
External administrator roles
External administrators are administrators from outside your organization.
You can assign external administrators as a way to access your organization in case of emergency sign-in issues, such as if SSO isn't working properly for a SSO-configured organization.
Anyone outside your organization that has access to your organization’s Control Hub is shown in the Users section under the External Administrators tab.
There are three external administrator types:
- External full administrator—External full administrators have many of the same permissions as internal full administrators. External full administrators can manage users, devices, licenses, and troubleshoot issues the same as an internal full administrator.
External administrators must sign in to Control Hub after being assigned the external full administrator role before they can get admin access to meeting sites.
- External read-only administrator—External read-only administrators are users that can view your organizational settings and templates, but not make any changes. Support staff that access your organization generally have the role of read-only administrator. Read-only administrator access is automatically revoked after some time. You can grant or deny administrative access to anyone.
- Provisioning administrator—Provisioning administrators are added when a partner provisions your Webex services orders. Provisioning administrators can provision orders, access your organization's licenses and upgrades, add and delete Webex sites, and access locations.
The provisioning administrator role is implicitly granted to a partner administrator as they launch a customer's Control Hub. The role can't be assigned to an external user in the same manner as the external full admin or external read-only admin roles.
Assign external administrators as full or read-only administrators in order to clearly define what their responsibilities are in your organization. Dividing administrative responsibilities can also ensure greater accountability within your organization.
Access | External full administrator | External read-only administrator | Provisioning administrator |
---|---|---|---|
User Management | ✔ | Read-only | X |
Device Management | ✔ | Read-only | X |
Company Policy and Templates | ✔ | Read-only | X |
Analytics and Reports | ✔ | Read-only | X |
Troubleshooting | ✔ | Read-only | X |
Support Metrics and Notifications | ✔ | Read-only | X |
Licenses and Upgrades | ✔ | Read-only | ✔ (for the services the partner sold) |
Assign roles | ✔ | Read-only | X |
Provision orders | ✔ | X | ✔ (for the services the partner sold) |
Add and delete sites | ✔ | X | ✔ (for the services the partner sold) |
Add external administrators | X | X | X |
Locations | ✔ | Read-only | ✔ |
Add external administrators
You can add anyone outside your organization as an external administrator to help maintain your Webex services and users. External administrators can't add additional external administrators to your organization.
There are a few limitations to keep in mind before you add an external administrator.
-
You can only add external administrators from the same environment as your organization. For example, while you can allow external commercial users as guests to your Webex for Government organization, you can't grant them external administrator privileges.
-
Users in free self-sign up organizations can be added as external administrators. However, users that are part of the consumer organization can't be added as an external administrator. Control Hub will indicate an error when you try to verify the emails of users who are in the consumer organization.
1 |
Sign in to Control Hub at https://admin.webex.com, and open the Users page. |
2 |
Filter the user list by All external administrators to see the list of external admins. |
3 |
Click Add external administrator. |
4 |
Enter the administrator's email address and click Verify email. |
5 |
If this user belongs to a partner organization that manages your subscription, choose Full administrator privileges or Provisioning administrator privileges. If they are from any other organization, choose:
|
6 |
Click OK. |
Manage external administrator privileges
You can choose what information is shared or withheld from external administrators.
As a full administrator of your organization, you can also adjust the administrator privileges for external administrators.
1 |
Sign in to Control Hub, then open the Users page. |
2 |
Filter the user list by All external administrators to see the list of external admins. |
3 |
Select the user you want to edit. |
4 |
Choose one of the following:
|