Administrative Users for a CI360 Tenant

[OlafKratzsch]

There are some best practices that you can use to manage administrative users in SAS Customer Intelligence. You can now create users and assign roles in the User Management section of the General Settings.

Before 22.11, when organizations were onboarded to a new instance of SAS Customer Intelligence 360, customers were asked to assign a user to the role of tenant administrator in SAS App Central. Because user management is now performed in the user interface for SAS Customer Intelligence 360, the designation of tenant administrator is no longer relevant.

The user that was designated as the tenant administrator was the first administrator that was assigned to an environment, but the user was never assigned a set of unique privileges. As the first administrator, though, it was that user’s responsibility to create other users and assign additional administrator roles.

During the onboarding process, SAS will still create the first administrator for the tenant, and this user can create any subsequent users and assign roles.

In the past, SAS Technical Support has received requests to change the tenant administrator for reasons like these examples:

• The user was changing roles or leaving the organization.
• Another user was taking over the responsibility of managing the users and the tenant.

To help you provide self-service for your tenant environments, here are some tips that you can follow:

• Assign administrator privileges to at least two users. This practice ensures that you always have a user that can create users and assign administrator roles.
• If an administrator changes roles or leaves the team, ask another administrator to remove that user from the tenant. You do not need to inform SAS Technical Support, even if that person was listed on the onboarding forms.
• Create an access point and enable it to use the System for Cross-Domain Identity Management (SCIM) API. This enables approved personnel to use the SCIM API to manage users in case of an emergency.

If an organization still needs help because there are no tenant administrators available, contact SAS Technical Support and ask them to perform one or more of these steps:

• Add an administrator role to an existing user
• Create a new user with an administrator role