Background

CyberQP automatically assigns imported accounts to "Sections" based on detected user type (End User, Administrator, or Service).

In some environments, account attributes may result in an account being placed in a different "Section" than intended. This can occur due to variations in source system configuration or how account roles are defined upstream.

With this release, administrators can now move accounts between "Sections" directly, eliminating the need to remove and re-import accounts when adjustments are required.

Prerequisites

• Technician must have access to the Customer
• Technician must have access to the Dashboard Sections for both the "from" and "to"
• Technician must have higher role than HelpDesk (we assume Helpdesk Role is to use the functions, not manage the customer configuration)

Disclaimer

NOTE: Moving an account to a different Section treats the account as a manual import. After the move, technicians must re-associate the account with the PSA, configure Password Storage, and re-enable Rotation when applicable (Administrator or Service Sections). Vault customers will retain historical passwords during the move.

A pop up warning will remind the technician to perform that action.

 

The following table defines the supported and unsupported account move paths between Sections.

Specific Cases for Moving from/To Sections

1. When an End User that is imported with the Active Directory Account and Entra/M365 (Sync enabled) is moved to Administrators section
   1. The Accounts will be split into separate accounts - 
      1. This will ensure that each account is rotated individually - passwords will be different for each account.
2. When an End User that is imported with the Active Directory Account and Entra/M365 (Sync enabled) is moved to Services section
   1. The Active Directory Account will be moved to the Services section.  The M365 Account will remain in the End User section
      1. Because Services are meant for Local or Active Directory only, the M365 Account cannot be moved to Services.
          

Process

For each section, as listed above, the ability to move the accounts via the "Change Account Type" menu option will be shown.

You can do this in bulk if you have multiple accounts to move or via the 3 Dot Menu on the far right side of the screen.

1. Select the Account(s) you wish to move.

2. Select the Change Account type - and slide out selection
    

   

3. Select the section you want the account to be moved to.

4. After selecting the section a pop up warning will be displayed.  The content of that pop up will vary slightly depending on the account source and destination you selected.
    

   

   1. Reminder - this should be read by the technician to ensure they know what will happen to the account.
5. Click Change to complete the Process.

6. A banner will appear at the top of the page to confirm the move was completed.
    

   

   1. If the account was NOT moved, you will see a failure banner.

Next Steps

1. Depending on the source of the account, the original section, and the destination section, the Technician will want to ensure they perform any "Matching" to the PSA, Password Storage, Enable Rotation or Self-Serve, etc. functions are completed in order to have the account fully functional as the new account type Section.

Password Storage for any Account Section
IT Glue Matching - Administrator, Service, and End User Accounts – CyberQP
Hudu Matching - Administrator, Service, and End User Accounts – CyberQP

Enable Rotation for Administrator and Service Section
How to Setup Scheduled Password Rotation of Service Accounts with External Password Vault – CyberQP
How to Setup Scheduled Password Rotation of Administrator Accounts with External Password Vault – CyberQP

Matching End Users to the PSA
Match ConnectWise Contacts with CyberQP Accounts – CyberQP
Match Kaseya (Datto) AutoTask PSA Contacts with CyberQP Accounts – CyberQP
Match CyberQP End-User with HaloPSA End-User – CyberQP