DE EN
Contents
Handbook home
Getting started
Getting started Who can do what? Approval & Settings
Company profile
Overview
Areas
Dashboard
Overview Create a PDF report
Devices
Overview Search and filter devices Find devices that haven't checked in for a while View BitLocker keys and LAPS passwords View removed devices
Users
Overview Sign-in analysis
Security Insights
Overview Review controls Manage exemptions Fix a security issue
Mail Security
Overview Set up DMARC reports
Administration
Admin Panel
Overview Manage areas Organization management
MSP & partners
MSP & Partners
Overview Invite and manage an MSP My customers

Invite and manage an MSP

You want the IT service provider who looks after your environment (an MSP) to work in Clarios with you. On the Partner access page you invite them and then stay in control: read the status, toggle automatic renewal, block individual people, end the access, and check what was done.

🛡️ This page is for customer admins. You need Admin rights.

🖼️ Screenshot: The full Partner access page. At the top the Invite an MSP section with the MSP tenant id or domain field and the Send invitation button, below it Partnerships with one or two partner cards (status, the auto-renew checkbox, the Audit, Block user, and Revoke buttons). Light theme, ~1440 px wide, demo data.

Target file: assets/msp-partner/partner-access.png

Step by step: invite an MSP

  1. Open the Partner access page.
  2. At the top, in MSP tenant id or domain, enter the provider: either their tenant id (a long identifier like 00000000-0000-0000-0000-000000000000) or one of their domains (for example msp.example.com). Clarios works out which one you entered.
  3. Click Send invitation. You see Invitation sent and the field clears.
  4. Check: the new partnership now appears under Partnerships with the status Pending. It is waiting for the provider to accept it.

✅ Done. The invitation is out. Once the provider accepts, the status flips to Active.

💡 Tip: The tenant id is the most precise option. A domain is resolved to one automatically. (If you leave the field empty, Clarios prompts you with Enter the MSP tenant id or domain.)

🖼️ Screenshot: Close-up of the Invite an MSP section: the MSP tenant id or domain field with the Send invitation button beside it.

Target file: assets/msp-partner/invite-dialog.png

Read the status

Under Partnerships, each partner has its own card. If there are none yet, it shows No partnerships yet. A card shows the provider’s name, a colored status marker, and (when access is live) the expiry date as “access until …”. These are the statuses:

StatusMeaning
PendingInvitation sent, waiting for the provider.
ActiveAccepted, the access is live.
RevokedYou have ended the access.
ExpiredThe 90 days ran out without renewal.

ℹ️ Note: If the provider declines, it shows Declined. If you invite again afterwards, a new partnership is created, and the earlier history is kept.

Toggle automatic renewal

Each card has an auto-renew checkbox. Select or clear it: the change is saved right away.

  • Selected: the access renews automatically while it is being used.
  • Cleared: the access runs out after 90 days (Expired) and ends.

Block or unblock a single person

Even when the whole provider is allowed in, you can lock out a single person.

Block:

  1. On the card, click Block user.
  2. In the dialog, enter the person’s sign-in name (UPN) (“Block which MSP user (UPN)?”) and confirm. You see User blocked.
  3. The blocked person then appears on the card under Blocked:.

Unblock: next to the person, click (unblock). You see User unblocked, and they disappear from the list.

✅ Done. The blocked person can no longer switch into your environment. Everyone else at the provider keeps working normally.

End the access completely

  1. On the card, click Revoke.
  2. Confirm the prompt “Revoke access for …?”.

You see Access revoked, the partnership moves to Revoked, and the provider can no longer get into your environment. This takes effect almost immediately.

ℹ️ Note: Inviting and ending are yours alone. The provider can neither extend nor restore their own access.

Check what was done (Audit)

  1. On the card, click Audit. A list opens below the card, and the button now reads Hide audit.
  2. Under “What this MSP did in your tenant:” you see a table with the columns When, MSP user (who), Action (what), and Object (on what). If there is nothing, it shows No actions recorded yet.
  3. To close it, click Hide audit again.

✅ Done. You can see exactly which person at the provider did what, and when, in your environment. This cannot be hidden.

🖼️ Screenshot: A partner card with Audit opened, showing the table with the When, MSP user, Action, and Object columns and a few example rows.

Target file: assets/msp-partner/audit-log.png

What’s next?