Manage external access

Learn how to manage external access.

Before you enable your partner's access to your Flexera One SaaS Management product, ensure that you have the appropriate data protection agreements in place with that partner.

When your Flexera One SaaS Management product is part of a managed services agreement, it is fully managed by your partner, and you cannot change your external access configuration.

Set up external access

To grant access to your data to a partner, you must configure their external access.

1. From the Administration menu, under Flexera One SaaS Management Settings, select External access.

2. Select Set up access.

3. In Company name or domain, select your accredited partner.

   If the partner that you want to grant access to is not listed, contact your partner to ensure that their domain is enabled in Flexera One SaaS Management, and to confirm the name of their domain, which they can find in Licenses and usage in General information.

4. In Access status, do one of the following:

   • If you do not want your partner to be able to access your data at this time, select Access disabled.

   • If you want your partner to be able to access your data starting now and with no end date, select Continuous access enabled. This is the default when you set up a new partner. You can edit the status at any time.

   • If you want your partner to be able to access your data only for a specific period, choose Select an access period, and then define a date range to allow access.

   When you restrict a partner's access status to a specific period, the start and end times of the access period are in the time zone you are in when you set up the external access.

5. In Role management, do one of the following:

   • If you want authorized external users to have full access to your data, leave the Role management toggle turned off.

   • If you want to assign roles to authorized external users:

     1. Turn on the Role management toggle.

     2. In Role assignment, select the roles that you want to assign to all authorized users.

     If you leave Role assignment empty, authorized users have no permissions in your Flexera One SaaS Management product.

   • If you want to assign specific roles to specific users after your partner has authorized users, you can edit your partner's external access. For more information, see Edit external access.
   • For examples of how to use role management to control the access granted to users authorized by your partner, see Role management examples.

6. Select Confirm.

   Your accredited partner appears on your external access list with their access status. After your partner authorizes their users to access your Flexera One SaaS Management product, you can view a list of the third party's users with access by hovering over the user icon.

Edit external access

A third party's access is indicated on your external access list.

If your Flexera One SaaS Management product is fully managed by your partner, you only have the option to View.

1. On the External access page, select the three dots to the right of your partner or the Snow Software instance listed that you want to change the access status for.

2. Select Edit.

3. Optional: In Access status, select one of the following:

   • If you do not want the third party to be able to access your data at this time, select Access disabled.

   • If you want the third party to be able to access your data starting now and with no end date, select Continuous access enabled.

   • If you want the third party to be able to access your data only for a specific period, choose Select an access period, and then define a date range to allow access.

   When you restrict a third party's access status to a specific period, the start and end times of the access period are in the time zone you are in when you set up the external access.

4. Optional: In Role management, do one of the following:

   • If you want authorized external users to have full access to your data, turn the Role management toggle off. This overrides any roles previously assigned to authorized users.

   • If you want to add or remove roles for authorized external users:

     1. Ensure that the Role management toggle is turned on.

     2. Optional: In Role assignment, select the roles that you want to add or remove.

        If you leave Role assignment empty, authorized users have no permissions in your Flexera One SaaS Management product.

     3. Optional: To manage roles for specific authorized users:

        1. Select the users whose roles you want to manage.

        2. In Users with access, select Actions, and then Manage roles.

        3. Add or remove the roles for the selected users as required.

        4. Select Confirm.

     For examples of how to use role management to control the access granted to users authorized by your partner, see Role management examples.

5. Select Confirm.

   The third party's modified access status appears on your external access list. You can view a list of the third party's users with access by hovering over the user icon.

Delete external access

If you delete a partner from your external access list, and you later want to restore their access, you must set up their access again.

If your Flexera One SaaS Management product is fully managed by your partner, you only have the option to View.

1. On the External access page, select the three dots to the right of the third party that you want to delete.

2. Select Delete.

3. In Delete external access, select Delete.