Intel vPro® Platform
Intel Manageability Forum for Intel® EMA, AMT, SCS & Manageability Commander
2942 Discussions

EMA Multiple Tenant with common user

AJ334
Beginner
1,300 Views

I have a use case for an EMA instance with multiple tenants where at least two people will need access as Tenant admin to 2 of the tenants concurrently.

How can I accomplish this if the AD ID was used inside of the first tenant?

0 Kudos
7 Replies
MIGUEL_C_Intel
Moderator
1,266 Views

Hello, AJ334,


We are glad to know you are using our products.


Further information is necessary before giving you an answer.

Will you have 2 Domains?

Or you will assign the Tenant profile for 2 already existing users in Windows AD?

Will the second Tenant be set up as an AD or local account?

If the second Tenant will be a local account; just create a new Tenant ID, and it'll be different from the first.

Please provide as much information as possible.


Regards,

Miguel C.

Intel Customer Support Technician


0 Kudos
AJ334
Beginner
1,259 Views

@MIGUEL_C_Intel  Single Domain, multiple OUs. Each OU is effectively a separate tenant.

 

Some individuals may be responsible for multiple OUs. Consequently there would be at least one computer group per OU.

 

Everything has to be AD ID based.

 

0 Kudos
MIGUEL_C_Intel
Moderator
1,253 Views

Hello, AJ334,

 

Intel® EMA provides the option to create separate Tenant administrators per Tenant Accounts. I am adding a picture and the steps.

 

Create the Tenant Accounts.

Then, go to the Users tab.

Select the Tenant Account.

Then, click over the New User option and create the Tenant Administrator.

 

Tenants.PNG

 

Regards,

Miguel C.

Intel Customer Support Technician

 

0 Kudos
AJ334
Beginner
1,228 Views

@MIGUEL_C_Intel  Taking your example above. If I want to add test@home.arpa to the tenant marked lab, how do I do that?

Using your method, it will say "user name already exists" and won't let me continue.

0 Kudos
MIGUEL_C_Intel
Moderator
1,217 Views

Hello, AJ334,

 

A Tenant Administrator can’t handle 2 Tenant accounts.  I suggest creating 1 Tenant account and the necessary Endpoint groups. Then, create Endpoint Group Creators or Endpoint Group Users (they will work as Tenant Administrators) and finally create User Groups (let's say Sub-Tenant accounts).  In this section 2 or more Endpoint Group Creators or Endpoint Group Users can manage several Endpoint groups at the same time.

 

Section 1.2 - Key Concepts provides the description of each role. 

Intel® Endpoint Management Assistant (Intel® EMA) Administration and Usage Guide version: 1.12.1

The document is included in the EMA software zip file in the Documents folder.

https://www.intel.com/content/www/us/en/download/19449/intel-endpoint-management-assistant-intel-ema.html

 

Users.PNG

Users Groups.PNG

Users Groups General.PNG

Users Groups Members.PNG

Users Groups Endpoint Groups.PNG

 

 

Regards,

Miguel C.

Intel Customer Support Technician

 

0 Kudos
MIGUEL_C_Intel
Moderator
1,137 Views

Hello, AJ334,


I hope this post finds you well.


If further assistance is necessary, do not hesitate to reply.


Regards,

Miguel C.

Intel Customer Support Technician


0 Kudos
MIGUEL_C_Intel
Moderator
1,104 Views

Hello, AJ334,


I will gladly provide more assistance if necessary; do not hesitate to reply or create a new post.


Regards,

Miguel C.

Intel Customer Support Technician


0 Kudos
Reply