Managing Admins

[Jwiley78]

Is there a good way to manage Admins for multiple Organizations?  It gets a little time consuming to go through multiple organizations every time we hire a new engineer or one decides to leave the company.

[DarrenOC]

Hi @Jwiley78 ,

Not that I’m aware of for multiple orgs.  The organisation admins have full rights for all networks within the organisation.  Whereas a network administrator only has rights to the particular network it has been assigned.

https://documentation.meraki.com/zGeneral_Administration/Managing_Dashboard_Access/Managing_Dashboar...

[Jwiley78]

That's what I was afraid of.  Just have to do it the manual way to get it up to date and then hopefully I can get everything up to date and then try to find a good strategy to keep it up to date after that.

[DarrenOC]

Could be way of automating via API?

[PhilipDAth]

You'll want to use SAML for this.

https://documentation.meraki.com/zGeneral_Administration/Managing_Dashboard_Access/Configuring_SAML_... 

Examples of SAML providers are the Duo Access Gateway and Azure AD (Azure AD is a horrible SAML gateway though ...).

[Jwiley78]

I'll have to look into this one.  Do you know if you can us SAML and local users together or is one or the other?

[PhilipDAth]

You can use both at the same time.

Typically customers have local user accounts, and the MSP uses SAML.

[BrothersTM]

@PhilipDAth is correct on SAML. That would be the easiest way. I just finished setting up some new SAML roles today using G Suite as the IDP. It worked quite well with the new SAML camera roles as well as traditional administrator access.