Depending on your plan you can have certain number of admins in itopia software that are allowed to manage your deployments (clients). Please have a look at the below table to see how many admins are available for your plan:
First CAS admin account is automatically created when you signup for itopia CAS software.
Besides the itopia CAS admin account, every deployment also gets the Domain admin accounts automatically.
Admins in itopia CAS also get domain admin accounts to connect to the deployment servers. The account is created at the provisioning for the CAS admins that have Editor or Owner access to the deployment.
When the itopia CAS admin account is created or deleted, the system will create or delete the domain admin account as well.
Create new admin account
You can add more admins from the top right corner menu. Select Admins:
You’ll see the list of admins under the ADMINS tab.
Click on the green + sign to invite new admin:
You will specify the details like email address and role for new admin account.
The "Role" is a permission level you want to assign to the new account.
It can be set as Viewer and editing will not be allowed for the admin. Domain admin account doesn't get created for Viewer admin access. It only allows accessing itopia CAS without the right to make any changes from the portal.
Editor gets a domain admin account as well and can modify and make all the changes in itopia CAS except for the billing / subscription changes and editing other admin accounts.
Owner has the same rights as Editor and can also create and edit other admin accounts and make changes to the billing and subscription information.
You also have an option to restrict the admin account access to just the selected deployments.
This option is available for Viewer and Editor roles. If you want to limit the admin account to just some of your deployments, choose the option "Select deploymets".
After adding the clients that the admin will have access to, click SEND iNVITE
Note: The Owner role gets access to all deployments by default.
New admin you created will receive an email with an invitation to create itopia platform password.
When the password is created, the system will create server admin credentials to already existing clients' servers and send them by email to the new admin.
IMPORTANT: to receive server admin credentials, make sure that all your pdc servers are powered on. If the system fails to create the admin credentials for any reason, it will try to create them again after few minutes and it repeats this process 3 times before sending the email. Give the system 40 minutes to process the changes with domain admin accounts.
If the domain controller (pdc server) is turned off, or our system cannot establish connection with it 3 times, the system creates a task in your Tasks module to remind you need to create those accounts in AD manually.
Editing admin accounts
Only Admins with "Owner" role can edit other admin accounts. You can edit admin accounts from the admin menu in itopia. Mark the admin you want to edit and hit the pencil icon:
You will be able to edit the First and the Last name, Phone number, admin Role and Clients that the admin has access to.
In case you're changing admin's access to a deployment, please note that it can take up to 40 minutes to create/ remove their domain admin credentials. The domain controller (pdc) server must be powered on during the process.
Disable admin account
You have now an option to disable an admin account. Only "Owners" are allowed to disable other admin accounts. The option is available when editing an admin.
Disabling the admin account will disable both accounts - CAS admin account to access the management portal and domain admin accounts for your existing deployments.
Deleting an admin account
You can delete the admin account from the same place, mark the checkbox next to admin's name and hit the trash icon.
Only admins with "Owner" access level can delete other admin accounts.
This action will delete the admin account in Active Directory.
If the domain account deletion fails, you will get a task in Tasks module to manually delete this account from domain controller (xxxPDC server).
IMPORTANT: All the PDC Servers must be pwered on when deleting an admin account since the system automatically deletes the domain admin account as well. Give the system 40 minutes to process the changes with domain admin accounts.