Manage Account Groups

You can set up account groups so that you can assign operator permissions and endpoint policies to a group of accounts.

Service Providers can use account groups to control account access in WatchGuard Cloud. You can restrict access for Auditor and Helpdesk roles with account groups. These operators are limited to the accounts in their assigned account group. For example, if Auditor and Helpdesk operators are restricted to some account groups (instead of ALL - default), they will no longer have access to their own Subscriber account. Sales Role can access all accounts in Account Groups but cannot change the group members. Owners roles always have full access. For more information, go to Add Operators to Managed Accounts.

Your Subscriber account (My Account) is where Service Providers configure and manage their own security services. This account cannot be added to an account group. Activity on this account can only be seen by operators with the Owner role.

You can also use account groups to assign policies for endpoint configuration across multiple accounts. If your account and any accounts you manage have an endpoint license, the accounts automatically appear in the multi-tenant endpoint security management UI. For more information, go to About Multi-Tenant Management in WatchGuard Endpoint Security.

To search for an account or account group, in the Search bar, type the name of the account or account group. Select the account or account group you want to find from the results and press Enter.

Your operator role determines what you can see and do in WatchGuard Cloud. Your role must have the Configure Account Groups permission to view or configure this feature. For more information, go to Manage WatchGuard Cloud Operators and Roles.

To add an account group:

  1. From Account Manager, select Overview.
  2. Select Administration > Account Groups.

Screen shot of Account Groups page in WatchGuard Cloud

  1. Click Add Account Group.

  1. Type a Name for the group.
  2. Click Add.
    The account group appears under the All Accounts group.

To change the name of an account group:

  1. On the Account Groups page, next to the account group you want to change the name for, click and select Rename Group.
  2. Type a new Name.
  3. Click Update.

To delete an account group:

  1. On the Account Groups page, next to the account group you want to delete, click and select Delete Group.
    To delete an account group, it must not contain any accounts.
  2. Click Delete.

Move Accounts and Account Groups

To organize your accounts, you can move accounts and account groups within the All Accounts group. You can use drag and drop or the Move to Group dialog box.

To move an account or account group to another account group with drag and drop:

  1. In the All Accounts group, select the account or account group you want to move.
  2. Drag the account or the account group folder and its contents to another account group.
    You cannot move My Account (shown in gray) to another location.

To move an account or account group to another account group with the Move to Group dialog box:

  1. On the Account Groups page, next to the account or account group you want to move, click and select Move to Group.
  2. From the Account Groups drop-down list, select the account group you want to move the account or account group to.
  3. Click Move.

Related Topics

Allocate AuthPoint Users

Add Operators to Managed Accounts

Manage Custom Operator Roles

Edit Account Details for a Managed Account

About Multi-Tenant Management in WatchGuard Endpoint Security