Issue

When attempting to provision agents in a CYRISMA instance, users with a "Tech" role in MSP may encounter an error due to insufficient permissions. This occurs because the "Tech" role in MSP maps to the "Security Administrator" role in the instance, which does not include provisioning permissions.

Solution

Understand Role Mapping

• The "Tech" role in MSP maps to the "Security Administrator" role in an instance.
• The "Administrator" role in MSP maps to the "Systems Administrator" role in an instance, which is required for provisioning agents.

Update User Role
To gain provisioning permissions:

• Contact the MSP admin and request that your role in MSP be updated from "Tech" to "Administrator".
• Once this change is made, your instance-level role will automatically update to "Systems Administrator," allowing agent provisioning.

Direct Instance Access

• It is not possible to directly assign the "Systems Administrator" role within an instance or bypass MSP role mapping.
• All permissions must be managed through the MSP platform.

Notes

• If additional assistance is needed, reach out to CYRISMA Support or your MSP admin to ensure role updates are applied correctly.
• Role changes may take effect immediately, but a logout and login may be required.