Manage access to the Devicie Portal

This article provides instructions for Devicie customers on how to manage user access to the Devicie portal.

How Devicie access works

As part of your onboarding process, the Devicie solutions team will set your organisation up with access to the Devicie Portal.

Devicie uses a Microsoft first approach to access management, this provides you with full control over your environment. We do this using specific role based Microsoft Entra groups. This method allows you to manage access seamlessly and leverage Privileged Identity Management (PIM) features within Entra if necessary.

To manage someone's access to the Devicie Portal, you will simply need to add or remove them from the relevant Entra groups explained below. Anyone who is a member of these groups will be able to directly login via SSO using their existing Microsoft account. 

Two access groups

A standard set up for Devicie customers includes two access groups with different permission levels described below. The default group names are also provided below, but they may be set up with custom names in your tenant. If you are not sure which specific groups were created in your tenant, please contact support.

1. Dashboard Viewer
   Default group name: Devicie-Portal-Viewers
   Members of this groups are able to view Devicie dashboard report data. 
2. Dashboard Admin
   Default group name: Devicie-Portal-Administrators
   Members of this group can view reports and can also deploy and manage Devicie content on your organisation's tenant. 

Manage User Access

As a customer, you can manage who gets access to the Devicie Portal by adding users to the appropriate Entra groups above. To do this, you will need to have one of the following roles:

1. Global Administrator
2. User Administrator
3. Privileged Role Administrator
4. Groups Administrator

Please note that you do not need to assign any Devicie applications to these users, membership of the group is sufficient to provide access.

Once someone has been added to the relevant group, they will be able to directly login via SSO using their existing Microsoft account. 

Additional controls

Customers who wish to provide additional control over access permissions are recommended to use Privileged Identity Management (PIM) in Microsoft Entra ID to manage how users within your organisation can request and gain membership in the groups.