Assigning roles through groups allows a set of roles to be given to users by making them a member of a group. This method makes it easy to assign the same roles to multiple users.
Assigning roles by membership in a child organization access group
Notes:
- Child organization access groups are available only to channel partners.
- Roles assigned through membership in a child organization access group apply across all customer organizations.
For channel partners, the Groups tab shows two tabs: Organization Access and Child Organization Access. Organization access groups apply only to the channel partner’s organization. Child organization access groups apply to the customer organization. The process for managing membership and roles for organization access and child organization access groups is the same.
The difference between organization access groups and child organization access groups is that child organization access groups are created with a default role, Partner Administrator. You cannot delete the Partner Administrator role from a child organization access group. You can add or remove additional roles as needed.
The Partner Administrator role is required for users to have access to customer (child) organizations. For example, a user who will be managing printers in a child organization using Fleet Management must be a member of a child organization access group. Moreover, that child organization access group has the Fleet Management Administrator role added along with the default Partner Administrator role.