Automatic User Deprovisioning

SECURITY  Master, Superuser, Administrator, Global Administrator

Instructions follow on how to set up just-in-time user deprovisioning for a module. You set up just-in-time user deprovisioning for a module by configuring Automatic User Deprovisioning from within the individual module.

  • If you enable Automatic User Deprovisioning, then just-in-time user deprovisioning will be allowed for the module as follows:

    • Module users will be deactivated or deleted when they are deactivated or deleted in KaseyaOne.

    • Module users will be disabled if deleting users is not an option in the module.

    • Module user accounts will be deactivated when KaseyaOne users lose access to the module.

  • If you disable Automatic User Deprovisioning, then you must manually deactivate or delete/disable module users whenever they are deactivated or deleted in KaseyaOne.

Enable Automatic User Deprovisioning from individual modules

Instructions to configure Automatic User Deprovisioning from individual modules follow. This feature is supported in certain modules only.

To enable Automatic User Deprovisioning for BMS/Vorex, do the following:

  1. From the BMS home page, navigate to Admin > My Company > KaseyaOne Settings, then go to the Automatic User Creation tab.

  2. Turn on the Automatic User Deprovisioning toggle.

  3. Click Save.

For more information, refer to BMS Auth & Provision | KaseyaOne Settings | JIT and BMS/Vorex Help.

To enable Automatic User Deprovisioning for Datto RMM, do the following:

  1. Log in to Datto RMM in the usual way and navigate to Setup > Integrations > KaseyaOne.

  2. Turn on the Enable Automatic User Deprovisioning toggle to allow just-in-time user deprovisioning for Datto RMM.

    IMPORTANT  Even if a user is not required to log in via KaseyaOne and this feature is enabled, their Datto RMM user account will be deleted or deactivated when their KaseyaOne user account is deleted or deactivated.

    For more information, refer to Datto RMM Help.

To enable Automatic User Deprovisioning for Graphus, do the following:

  1. Log in to Graphus in the usual way.

  2. Click MSP Administration on the top menu and then click KaseyaOne on the left navigation menu.

  3. In the Unified Login section, make sure Enable Log In with KaseyaOne is enabled.

  4. In the Central User Management section, turn on the Enable Automatic User Deprovisioning toggle.

For more information, refer to Set up Automatic User Deprovisioning with KaseyaOne for Graphus and Graphus Knowledge Base.