Overview of Limited Access Mode

Nerdio Manager accounts can be provisioned in what's called a Limited Access mode to restrict permissions granted to the Nerdio Manager enterprise app in the customer's Azure tenant. In addition, existing customer accounts that were not created in limited access mode, can be switched to limited access mode.

Similarly, the Nerdio Manager install itself can be switched to limited access mode. This restricts the permissions granted to the Nerdio Manager enterprise app in MSP's Azure tenant.

See the diagram below for details.

Enable Limited Access Mode at the MSP Level

Nerdio Manager allows you to enable limited access mode at the MSP level.

To enable limited access mode at the MSP level:

1. At the MSP level, navigate to Settings > Environment.

2. On the right side of the banner, select the gears icon.

   

3. Toggle on the Limited access option.

4. Carefully review the confirmation pop-up.

   

5. After you have reviewed the confirmation pop-up, select OK.

   Note: Once you enable the limited access setting at the MSP level, we suggest you review Azure permissions. See Permissions and Nerdio Manager for more information.

Enable Limited Access Mode at the Account Level

Nerdio Manager allows you to enable limited access mode at the account level. This can be done for new accounts or existing accounts. See Enable Limited Access Mode for New Accounts and Enable Limited Access Mode for Existing Accounts for details.

Enable Limited Access Mode for New Accounts

To enable limited access mode at the account level for a new account:

1. At the MSP level, navigate to Accounts.

2. Select Add account.

3. On the right side of the banner, select the gears icon to turn on Limited Access mode.

   

4. See Add an Account for full details about adding a new account.

   Note: Nerdio Manager creates an app registration for each account during provisioning. See Permissions and Nerdio Manager for important notes about Azure permissions.

Enable Limited Access Mode for Existing Accounts

To enable limited access mode at the account level for an existing account:

1. At the MSP level, navigate to Accounts.

2. Locate the account you want to work with.

3. From the action menu, select Enable limited access.

   Warning: This is an irreversible operation.

4. Carefully review the confirmation pop-up.

   

5. After you have reviewed the confirmation pop-up, type CONFIRM and then select OK.