Use this procedure to add an employee administrator. Employee administrators receive access to all SaaS Protection organizations in their Datto Partner Portal tenant.

To add an employee administrator, complete the following steps:

1. Log in to the Datto Partner Portal (DPP) as an administrator.
2. Navigate to Admin > Manage Employees.
3. Click Add Employee in the upper-right corner of the page.

4. On the Add Employee page, enter the employee's basic information.
5. In the Portal section below, select Administrative from the Select Role list.
6. Click Add Employee in the lower-right corner of the page.
7. You are returned to the Manage Employees page. A Successfully added employee... message displays in the lower-left corner and the new administrator is added to the list of employees on the page.

The new administrator receives an email with login instructions. After the user sets up two-factor authentication (2FA) and a password, they can log in and access the SaaS Protection Status page, where they can view summary status information and log in directly to each SaaS Protection organization.

To modify, deactivate, reactivate, or delete an employee administrator, complete the following steps.

1. Log in to the Datto Partner Portal (DPP) as an administrator.
2. Navigate to Admin > Manage Employees.
3. Use the Manage Employees page to perform these tasks as needed:

• View or edit employee information and access permissions: Locate the employee and click View in the Additional Roles & Details column. The Roles Details pane shows the employee's role for each product (Portal, Endpoint Backup for PCs, Endpoint Backup, and BCDR). To modify settings, click Edit Employee, make changes as needed, then click Save Changes.

• Deactivate or reactivate the account: Locate the employee, click the More menu, then select one of these options: Deactivate Account or Reactivate Account. The account is deactivated or reactivated, and a confirmation message displays in the lower-left corner of the page.

• Delete the account: Locate the employee, click the More menu, then select Delete Account. In the Delete Account dialog, click Permanently Delete Account to continue. The account is deleted, and a confirmation message displays in the lower-left corner of the page.

For more general information on managing DPP employees, see this DPP article: Manage employee accounts and roles.

Use this procedure to add an administrator to one organization. Organization administrators receive access to the selected SaaS Protection organization only.

To add an organization administrator, complete the following steps:

1. Log in to the Datto Partner Portal (DPP) as an administrator.
2. Navigate to Admin > Manage Organizations.
3. Locate the organization in the list, and then click its Edit icon.

NOTE  If you do not see the organization, add the organization: click Create Organization in the upper-right corner of the page, enter the organization's name, then click Create Organization. The organization is added. Click its Edit icon.

4. In the SaaS Protection Services section, verify that the organization is linked to its SaaS Protection Service account.

If not, link the account:

• Click Link Services.

• In the Search by SaaS Protection Service Name box, type the first few characters of the organization's name. SaaS Protection service (organization's name, product being backed up, and retention type) suggestions display.

• Select the applicable service, then click Link SaaS Protection Service. You are returned to the Manage Organizations page, where the linked service now displays in the SaaS Protection Services section.

5. In the Users section, click Add Users.
6. Type the user's email address and the other required details.
7. Set Default Organization Access to Full Access.
8. Click Add Organization User.

The new administrator receives an email with login instructions. After the user sets up two-factor authentication (2FA) and a password, they can log in and access the SaaS Protection Status page, where they can view summary status information and log in directly to the SaaS Protection organization.

To modify, deactivate, reactivate, or delete an organization administrator, complete the following steps:

1. Log in to the Datto Partner Portal (DPP) as an administrator.
2. Navigate to Admin > Manage Organizations.
3. Locate the organization in the list, and then click its Edit icon.
4. In the Users section, locate the user. Perform these tasks as needed:

• View or edit access permissions: Click Edit. In the Edit Organization User dialog, update access permissions as needed, then click Save Changes.

• Deactivate or reactivate the account: Click the More menu, then select one of these options: Deactivate Account or Reactivate Account. The account is deactivated or reactivated, and a confirmation message displays in the lower-left corner of the page.

• Delete the account: Click the More menu, then select Delete Account. In the Delete Account dialog, click Delete Account to continue. The account is deleted, and a confirmation message displays in the lower-left corner of the page.

Your changes take effect immediately.

For more general information on managing organization users, see this DPP article: Manage company and organization users.

To add an administrator directly within a SaaS Protection organization, complete the following steps:

1. Log in to the Datto Partner Portal, and then select the tenant.
2. Navigate to Status > SaaS Protection Status.
3. Click the organization name. The organization's Google Workspace Overview page displays in SaaS Protection.
4. In the top navigation menu, click Admin > Manage Administrators.
5. Click Add Administrator. Type the user's details, and then click Add.

The new administrator is added and receives access to this SaaS Protection organization only.

If a user has Super Administrator permissions within a SaaS Protection account on the Manage Administrators page, you cannot remove that user. There is no self-service option for removing Super Administrators.

To remove a Super Administrator, contact Support. Refer to Kaseya Helpdesk to open a Support ticket.

The level of access differs based on where you add the administrator.

An administrator added directly within a SaaS Protection organization receives access to that organization only.

An employee administrator added in the Datto Partner Portal (DPP) receives access to all SaaS Protection organizations in their DPP tenant, as well as access to BCDR and networking devices.

An organization administrator added in the DPP receives access to the selected organization only.

Contact Support.

There's no self-service option for removing a user with Super Administrator permissions from the Manage Administrators page. Refer to Kaseya Helpdesk to open a Support ticket.