Manage Users
For supported software information, click here.
An operator, store administrator, MSP, reseller, or enterprise administrator can view, create, edit, and delete users and assign user roles and privileges from the Users dashboard. You cannot assign more privileges than the account you are using. Titan accounts allow access to both the Versa Titan portal and the Versa Titan mobile app.
For individual accounts, Titan Portal only displays permissible menu items. For example, the left menu bar may only display the Configure, Monitor, Troubleshoot, and Audit Logs icons for an Enterprise User account. Enterprise users do not have access to the Users module.
Titan Portal offers single sign-on (SSO) as a login mechanism between service providers and identity providers (IdPs). When adding a new user (tenant) from the Add User window, an operator, store admin, MSP, or reseller can select the external SSO authentication option to enable SSO for the new tenant.
To view the external SSO authentication and billing type options in the Add User window, you must create the store admin, MSP, or reseller as a new user. If you add the store admin or MSP to an existing organization or enterprise, the external SSO authentication option is not available in the Add User window. However, for a reseller, the external SSO authentication option is always available. If you add a new reseller to an existing organization or enterprise with external SSO authentication enabled, disabling or enabling the option does cause no change. If you create the reseller as a new organization or enterprise, you must select external SSO authentication option to enable it.
Manage User Accounts
To view a list of user accounts, click the Users icon in the left menu bar. The following screenshot displays the Users dashboard for an enterprise administrator login.
Field | Description |
---|---|
Users |
Displays the number of users added to the organization |
Status | Displays whether the user is locked or unlocked. |
Name | User's first and last name. |
User's email address. Initially matches username but can be edited. | |
Phone | User's phone number. |
Platform | Displays whether the user is a Versa IDP, an external, or a Versa Secure Private Access (VSPA) user. |
Role, Privileges, and Allowed Products | Displays the user role, privileges and allowed products:
|
Lock/Unlock | Click the toggle to lock or unlock the account. Locking the account disables the login without requiring you to delete the account. |
2FA | Slide the toggle to the left to disable or to the right to enable two-factor authentication. |
Notification | Slide the toggle to the left to disable or to the right to enable mobile phone notifications. |
Deploy Status | Displays the deployment status of the user that created in the Titan database. |
Action | Click the 3-dot icon to choose an action:
|
Create a Store Administrator Account
An operator can create a store administrator account and assign user roles and privileges. You cannot assign privileges that are higher than the level of the privileges of the account that you are using. A store administrator can log in to Titan Portal and can add other store administrators, MSPs, and resellers.
After you create a store administrator, a confirmation email is automatically sent to the email address that directs customers to the login screen and allows them to set their password. This email address automatically becomes the login name for the account.
To create a store administrator account:
- Log in to Titan Portal as an Operator, and create a new store administrator.
- Enter your username and password, and click Login.
- Click Users in the left menu bar to open the Users dashboard, and then click + Add User.
- Enter information for the following fields.
Field Description First Name Enter the user's first name. Last Name Enter the user's last name. Email Address Enter an email address for the user. This automatically becomes the login name for the account. You can change the email address after creating the account but not the login name. Custom Logo URL Enter the URL of a logo image file to upload to display the customer logo. The image file must be in JPEG, PNG, or SVG format. If you do not add a logo image, the dashboard displays the Versa logo. Custom Support URL Enter the support website URL of the MSP to display the customer support website. When tenants click on the support URL on dashboard, they are redirected to the MSP support website. If a support URL is not entered, the dashboard displays Versa Support URL. Phone Number Select the country code and enter the phone number for the user. Titan Mobile pushes notifications to this phone number. Two-Factor Authentication Slide the toggle to enable or disable two-factor authentication. You can enable either two-factor authentication or external SSO authentication, but not both. External SSO Authentication Click to enable external SSO authentication method for the new user (tenant). You can enable either two-factor authentication or external SSO authentication, but not both. To view the External SSO Authentication option, you must select the Create as New Store option. If you are adding a user for an existing tenant, the External SSO Authentication option does not display. Roles Select Store Admin.
Create as New Store Click to enter information about the new store, to enable external SSO authentication, and to select the billing type for the new user. Store Enter new store name. Provider Name Enter VERSA. Deploy Click to create a new region on the Director node for the new store. VD Customer Role (Required) Select the Versa Director customer role:
- TenantDashboardOperator—Cannot access device configuration from Versa Director. Migrated store admin, MSP, or reseller has TenantDashboardOperator role by default. To change the role, edit the user or contact Versa Support.
- TenantOperator—Access device configuration from Versa Director.
Regions Click to select regions. You can select multiple regions attached to the Titan node. Allowed Product Select the products that the store can order:
- Cloud Appliances
- Dell
- Versa Appliances
- Versa Cloud Gateway
- Versa Virtual Appliances
- White Box
Privileges Select the privileges:
- Manage Customer—Click to access the customer's organization.
- Manage Service—Click to access the dashboard and read and write customer networks or devices onboarded by this specific store admin.
Billing Type Select the billing type. To view the billing type option, you must select the Create as New Store option.
- License Usage Based—For customers using license usage-based billing, the device activated date is the start date of the license. For Cloud Gateway, the order date is the license start date.
- PO Based—For customers using PO-based billing, the device license start date is based on the purchase order license start date entered when the device was ordered. For a Cloud Gateway, the order date is the license start date.
- Click Create.
Create an MSP Account
An operator or store administrator can create an MSP account and assign user roles and privileges. You cannot assign privileges that are higher than the level of the privileges of the account that you are using. An MSP can log in to Titan Portal and add other MSPs and resellers.
A confirmation email is automatically sent to the email address that directs customers to the login screen and allows them to set their password. This email address automatically becomes the login name for the account.
To create an MSP account:
- Log into Titan Portal as a Store Administrator.
- Enter your username and password, and click Login.
- Click Users menu in the left menu bar to open the Users dashboard, and then click + Add User icon.
- Enter information for the following fields.
Field Description First Name Enter the first name for the MSP. Last Name Enter the last name for the MSP. Email Address Enter an email address for the MSP. This automatically becomes the login name for the account. You can change the email address after creating the account but not the login name. Custom Logo URL Enter the URL of a logo image file to upload to display the customer logo. The image file must be in JPEG, PNG, or SVG format. If you do not add a logo image, the dashboard displays the Versa logo. Custom Support URL Enter the support website URL of the MSP to display the customer support website. When tenants click on the support URL on dashboard, they are redirected to the MSP support website. If a support URL is not entered, the dashboard displays Versa Support URL. Phone Number Select the country code and enter the phone number for the MSP. Titan Mobile pushes notifications to this phone number. Two-Factor Authentication Slide the toggle to enable or disable two-factor authentication. You can enable either two-factor authentication or external SSO authentication, but not both. External SSO Authentication Click to enable external SSO authentication method for the user. You can enable either two-factor authentication or external SSO authentication, but not both. To view the External SSO Authentication option, you must select the Create as New MSP option. If you add a user for an existing tenant, the External SSO Authentication option does not display. Roles Select Managed Service Provider (MSP).
Create as New MSP Click to enter information about the new MSP, to enable external SSO authentication, and to select the billing type for the new user. MSP Enter a name for the MSP. Deploy Click to create a new region on the Director node for the MSP. VD Customer Role (Required) Select the Versa Director customer role:
- TenantDashboardOperator—Cannot access device configuration from Versa Director. Migrated store admin, MSP, or reseller has TenantDashboardOperator role by default. To change the role, edit the user or contact Versa Support.
- TenantOperator—Access device configuration from Versa Director.
Regions Click to select regions. If you are creating the MSP under the store admin that you have already created, the region that you selected while creating the store admin is automatically selected. Allowed Product Select the products that the MSP can order:
- Cloud Appliances
- Dell
- Versa Appliances
- Versa Virtual Appliances
- Versa Cloud Gateway
- White Box
Privileges Select the privileges:
- Manage Customer—Click to access the customer's organization and manage customer actions, such as creating a new customer, deleting a customer, and upgrading, renewing, and deleting device licenses.
- Manage Service—Click to access the dashboard and read and write customer networks or devices onboarded by this MSP.
Billing Type Select the billing type. To view the billing type option, you must select the Create as New MSP option.
- License Usage Based—For customers using license usage-based billing, the device activated date is the start date of the license. For Cloud Gateway, the order date is the license start date.
- PO Based—For customers using PO-based billing, the device license start date is based on the purchase order license start date entered when the device was ordered. For a Cloud Gateway, the order date is the license start date.
- Click Create.
- To create a reseller from an MSP account, see Create a Reseller Account, below.
Create a Reseller Account
An operator, store administrator, or MSP can create a reseller account and assign user roles and privileges. You cannot assign privileges that are higher than the level of the privileges for the account you are using. A reseller can log in to Titan Portal and add other resellers.
A confirmation email is automatically sent to the email address that directs customers to the login screen and allows them to set their password. This email address automatically becomes the login name for the account.
To create a reseller account:
- Log into Titan Portal as an Operator, Store Administrator, or MSP.
- Enter your username and password, and click Login.
- Click Users icon in the left menu bar to open the Users dashboard, and then click + Add User icon.
- Enter information for the following fields.
Field Description First Name Enter the first name for the reseller. Last Name Enter the last name the reseller. Email Address Enter an email address for the reseller. This automatically becomes the login name for the account. You can change the email address after creating the account but not the login name. Custom Logo URL Enter the URL of a logo image file to upload to display the customer logo. The image file must be in JPEG, PNG, or SVG format. If you do not add a logo image, the dashboard displays the Versa logo. Custom Support URL Enter the support website URL of the MSP to display the customer support website. When tenants click on the support URL on dashboard, they are redirected to the MSP support website. If a support URL is not entered, the dashboard displays Versa Support URL. Phone Number Select the country code and enter the phone number for the reseller. Titan Mobile pushes notifications to this phone number. Two-Factor Authentication Slide the toggle to enable or disable two-factor authentication. You can enable either two-factor authentication or external SSO authentication, but not both. External SSO Authentication Click to enable external SSO authentication method for the user. You can enable either two-factor authentication or external SSO authentication, but not both. To view the External SSO Authentication option, you must select the Create as New Reseller option. If you are adding a user for an existing tenant, the External SSO Authentication option does not display. However, for a reseller, the External SSO Authentication option is always available. If you add a new reseller to an existing tenant or enterprise with external SSO authentication enabled, disabling or enabling the option does not cause any change. Roles Select the reseller. A reseller can create another reseller with the rights to select allowed products and assign privileges
Create as New Reseller Click to enter information about the new reseller, to enable external SSO authentication, and to select the billing type for the new user. Store Select a store. MSP Select the MSP under which to create the new user. Company Enter the name of the company. Deploy Click to create a new region on the Director node for the reseller. VD Customer Role (Required) Select the Versa Director customer role:
- TenantDashboardOperator—Cannot access device configuration from Versa Director. Migrated store admin, MSP, or reseller has TenantDashboardOperator role by default. To change the role, edit the user or contact Versa Support.
- TenantOperator—Access device configuration from Versa Director.
Regions Click to select regions. You can select multiple regions. Allowed Product Select the products that the reseller can order:
- Cloud Appliances
- Dell
- Versa Appliances
- Versa Virtual Appliances
- Versa Cloud Gateway
- White Box
Privileges Select the privileges:
- Manage Customer—Click to manage customer devices.
- Monitor Customer Network—Click to access the dashboard and read customer networks or devices onboarded by this specific reseller.
- Manage Service—Click to access the dashboard and read and write customer networks or devices onboarded by this specific reseller.
Billing Type Select the billing type. To view the billing type option, you must select the Create as New Reseller option.
- License Usage Based—For customers using license usage-based billing type, the device activated date is the start date of the license. For Cloud Gateway, the order date is the license start date.
- PO Based—For customers using PO-based billing type, the device license start date is based on the purchase order license start date entered when the device was ordered. For a Cloud Gateway, the order date is the license start date.
- Click Create.
To create another reseller from a reseller account:
- Log in to Titan Portal as a reseller.
- Enter your username and password, and click Login.
- Click Users icon in the left menu bar to open the Users dashboard, and then click + Add User icon.
- Enter information for the following fields.
Field Description First Name Enter the first name for the reseller. Last Name Enter the last name for the reseller. Email Address Enter an email address for the reseller. This automatically becomes the login name for the account. You can change the email address after creating the account but not the login name. Phone Number Select the country code and enter the phone number for the reseller. Titan Mobile pushes notifications to this phone number. Two-Factor Authentication Slide the toggle to enable or disable two-factor authentication. You can enable either two-factor authentication or external SSO authentication, but not both. External SSO Auth Click to enable external SSO authentication method for the user. You can enable either two-factor authentication or external SSO authentication, but not both. VD Customer Role (Required) Select the Versa Director customer role:
- TenantDashboardOperator—Cannot access device configuration from Versa Director. Migrated store admin, MSP, or reseller has TenantDashboardOperator role by default. To change the role, edit the user or contact Versa Support.
- TenantOperator—Access device configuration from Versa Director.
Allowed Product Select the allowed products:
- Cloud Appliances
- Dell
- Versa Appliances
- Versa Virtual Appliances
- Versa Cloud Gateway
- White Box
Privileges Select the privileges:
- Manage Customer—Click to manage customer devices.
- Monitor Customer Network—Click to access the dashboard and read customer networks or devices onboarded by this specific reseller.
- Manage Service—Click to access the dashboard and read and write customer networks or devices onboarded by this specific reseller.
- Click Create.
Add an Enterprise Admin or User
An enterprise administrator can add a new account and assign user roles and privileges. You cannot assign more privileges than the account you are using. Users can use their accounts to log in to both Titan Portal and Titan Mobile. You can select the following platform options for a user when you add the user:
- External—For an external user, no email is sent. Instead, the authentication request goes to the external identity-provider (IdP), who authorizes the user to access Titan Portal.
- Versa IDP—For a Versa IDP user, Titan Portal automatically sends an email to the user with instructions for creating an account password for Titan Portal.
- VSPA (RAC/RAS)—Tenants who have SASE gateways with the VSPA service with local authentication can view the VSPA (RAC/RAS) option. VSPA users are set up on a SASE gateway, branch (remote access VPN) database, or multitenant with RAC/RAS device. An email is sent to set up the VSPA client. To create a VSPA (RAC/RAS) user, see Add a Versa Secure Private Access User and Set the User Account.
To add a new user:
- Click the Users icon in the left menu bar to display the Users dashboard.
- Click the + Add User icon at the top right to display the Add User window.
- Enter information for the following fields.
Field Description First Name Enter the user's first name. Last Name Enter the user's last name. Email Address Enter an email address for the user. This automatically becomes the login name for the account. You can change the email address after creating the account but not the login name. Phone Number Select the country code and enter the phone number for the MSP. Titan Mobile pushes notifications to this phone number. Versa IDP Click to create a Versa IDP user (Versa Portal database). An email is sent to the user so that they can set a password for Versa Portal.
External Click to create the user in the Titan database. When the user logs in to Titan Portal, the authentication request goes to the external IdP. VSPA (RAC/RAS) Click to create a VSPA user on a SASE gateway, remote access VPN device, or multitenant with RAC/RAS device in the Titan database. An email is sent with instructions for setting up the client VSPA. Note that this VSPA field is visible only to SASE gateway, remote access VPN, or multitenant with RAC/RAS users who purchase the VSPA service with local authentication. To update VSPA (RAC/RAS) users, enable the VSPA (RAC/RAS) service on the gateway or remote access VPN.
Two Factor Authentication Slide the toggle to enable or disable two-factor authentication.
Role Click Enterprise Admin or Enterprise User to assign a role to the account.
- Enterprise Admin
Enterprise Admin roles have the following privileges:
- Read and write access to WAN, LTE, LAN, WiFi, Security, and Steering settings.
- Read access to Versa Director, Versa Analytics, Audit Logs, and Titan shop.
By default, enterprise administrators have the following privileges:
- Read access to monitor, troubleshoot, inventory, and users menu items.
- Write access to WiFi radio settings and read-only access to all other configuration settings.
- Can create a new site.
- Can create new user accounts but cannot assign more privileges to an account than they have themselves.
- Enterprise User
Enterprise User roles have the following privileges:
- Read and write access to WAN, LTE, LAN, WiFi, Security, Steering, Secure Access, IPsec Backhaul, and Routing settings.
- Read access to Versa Director, Versa Analytics, and Audit Logs.
By default, enterprise users have the following privileges:
- Read access to monitor and troubleshoot menu items.
- Write access to WiFi radio settings and read-only access to all other configuration settings.
- Click Create.
Add a Versa Secure Private Access User and Set Up the User Account
To add a VSPA user:
- Click the Users icon in the left menu bar to display the Users dashboard.
- Click the + Add User icon to display the Add User window.
- Enter information for the following fields.
Field Description First Name Enter the user's first name. Last Name Enter the user's last name. Email Address Enter an email address for the user. This email address automatically becomes the login name for the account. You can change the email address after creating the account but not the login name. Phone Number Select the country code and enter the phone number for the MSP. Titan Mobile pushes notifications to this phone number. VSPA (RAC/RAS) Click to create a VSPA user on a SASE gateway, remote access VPN device, or multitenant with RAC/RAS device in the Titan database. An email is sent with instructions for setting up the client VSPA. Note that this field is visible only to SASE gateway, remote access VPN, or multitenant with RAC/RAS users who purchase the VSPA service with local authentication. To update VSPA (RAC/RAS) users, enable the VSPA (RAC/RAS) service on the gateway or Remote Access VPN.
- Click Create. After an enterprise admin creates a VSPA user, an email notification is sent to the user with username and a link to set the password. For example:
- Make a note of the registration information you received in the email.
- In the Create Password page, enter the password in Password and Confirm Password fields, and then click Set Password.
- In the VSPA Client Register window, enter the registration information that you received in the email, and then click Submit to register the VSPA client.
Enable or Disable Multiple Platforms for a Store Admin, an MSP, and a Reseller
You can enable multiple platforms, such as Versa IDP, external, and VSPA (RAC/RAS), for store administrators, MSPs, and resellers from an organization.
To enable or disable Versa IDP, external, and VSPA (RAC/RAS) platform for an MSP:
- Log into Titan Portal as an MSP.
- Enter your username and password, and click Login.
- Select the provider organization of the MSP from the organization list.
- Hover over the 3-dot menu in the user Actions column and click Edit to display the Edit User window.
- In the Edit User window, enable or disable the external, Versa IDP, or VSPA (RAC/RAS) platform. The VSPA (RAC/RAS) option is visible only for tenants with a SASE gateway, a remote access VPN, or multitenant with RAC/RAS device who purchase the VSPA service with local authentication.
- Click Update.
Edit a User
The enterprise admin can edit user information and change roles and privileges assigned to a user.
To edit a user:
- Click the Users icon in the left menu bar to display the Users dashboard.
- Hover over the 3-dot menu in the user Actions column and click Edit to display the Edit User window.
- Edit the information as needed.
- Click Enterprise User or Enterprise Admin to change roles.
- Click or unclick boxes to change Privileges.
- Click Update to save the settings.
Delete a User
The enterprise admin can delete users from the Titan Users dashboard. Deleting an account with an active login automatically logs out the user.
To delete a user:
- Click the Users icon in the left navigation menu bar to display the Users dashboard.
- Hover over the 3-dot menu in the user Actions column and click Delete.
- Click Yes in the popup window to delete the user, or click No to return to the Users dashboard without deleting the user.
Export User Information
To export user account details to a file in CSV format:
- Click the Users icon in the left navigation menu bar to display the Users dashboard.
- Click the Export icon to display a drop-down menu.
- Select CSV then use the popup window specific to your operating system to save the file.
Import Multiple Users Using an Excel Template
To import multiple user accounts:
- Click the Users icon in the left navigation menu bar. The Users dashboard displays.
- Click the icon to import users listed in an Excel template. You can import the external, Versa IDP, or VSPA user platform.
- To determine the format of the Excel template file, download the description help file.
The following screenshot shows the format of the top rows in the help file. For Versa IDP and external user platforms, enter values in the role, privileges, and two-factor authentication columns. For the VSPA user platform, which are used for SASE with VSPA service or remote access VPN with local authenticator, leave these columns empty.
- Click Browse File, and then select the Excel template that contains your users.
- Click Start Import Now.
Supported Software Information
Releases 10.3.4 and later support all content described in this article.