Allocate WatchGuard Compliance Reporting Users

When a Service Provider activates a WatchGuard Compliance Reporting license, the available license and user allocation appear in the Inventory page in WatchGuard Cloud. As a Service Provider, you can allocate users to your own account or to any account you manage from the Inventory page. You can allocate only one license of each type to a Subscriber account. You can allocate more than one license of the same type to a Service Provider account.

When you select Overview from Account Manager, the Inventory > Summary page shows a summary of the users and devices in your inventory. On the Overview > Inventory > Summary page, the Compliance Reporting section shows this information:

• Next License Expiration — Next license expiration date
• Allocated Users — Number of allocated term and subscription users

If you manage delegated accounts, the Overview > Inventory > Summary page does not include any inventory that the delegated accounts activated. To view the inventory activated by a tier-1 Subscriber delegated account, you must select the account in Account Manager.

The Inventory > Compliance Reporting > Licenses page shows the Compliance Reporting licenses you have, the type of license (for example, subscription, term, or trial), the license key, number of users, and expiration date. You can filter the list of licenses to view Expired or Active licenses only.

For information on trial licenses, go to About Trials in WatchGuard Cloud.

The Inventory > Compliance Reporting > Allocation page shows the next license expiration date, as well as the number of users allocated to managed accounts and the number of unallocated users in your account.

The Allocation page includes a table that lists your managed Service Provider and Subscriber accounts. Delegated accounts have a (Delegated) label next to the account name. To filter the table, from the drop-down list, select Subscribers or Service Providers. You can also enter text in the Search box to filter the table for a specific account.

To edit an existing allocation, select an account in the table. To allocate users to an account, click Allocate Users. When you allocate a term user to an account, you can specify an allocation expiration date.

If you manage delegated accounts, you can edit the allocation for delegated tier-1 Subscriber accounts only (these accounts purchase and activate their own license). You cannot edit allocations for other delegated accounts. The allocation for other delegated accounts is read only. To view the inventory for tier-n delegated accounts, select the account in Account Manager.

If you cancel a license or a license expires, there is a seven-day grace period before Compliance Reporting is disabled. For more information on expiration, go to License Expiration.

Allocation Types

When Service Providers allocate users from a license to their managed accounts, they select an allocation type which specifies how the managed account can use the users .

Term Allocation

When you allocate users as a term allocation, the managed account can allocate a specific number of users to an account for a set duration or term from a term license or MSSP points.

Subscription Allocation

When you allocate users as a subscription allocation, the managed account can allocate a specific number of users or an unlimited number of users . WatchGuard bills the account monthly based on the number of active users .

On the Allocation page, the table includes an Allocation Type column that can show Term, or Subscription. You can allocate multiple allocation types to a managed Service Provider account. For example, an account could have a term allocation and a subscription allocation.

Service Providers can activate licenses for delegated tier-1 Subscriber accounts. If the Subscriber account already has a term license for the same product, then an Allocation Owner column also displays in this table to help you differentiate the licenses. When you allocate users to a tier-1 Subscriber account that has already allocated users to itself, the users you allocate are added to the total number of users that the tier-1 Subscriber account has.

You cannot allocate users to a managed Service Provider account with the same allocation type as an existing allocation. If you set the allocation type for a managed Service Provider to be term allocation, you cannot add another term allocation (instead, edit the existing term allocation and change the quantity).

As a tier-1 Service Provider, you cannot edit the allocation type for users with a term allocation. To change the allocation type, you must deallocate the users with term allocation, and then reallocate the users with a subscription allocation. Before you deallocate the users with term allocation, we strongly recommend that you contact your managed Service Providers to make sure that their accounts do not become overallocated.

Allocate Users to an Account

Before you can allocate users to an account, the Service Provider account must have activated licenses. For more information, go to Activate a WatchGuard Compliance Reporting License.

Service Providers can allocate users as a term or subscription allocation. Go to the appropriate section:

• Allocate Term Users to an Account
• Allocate Subscription Users to an Account

Allocate Term Users to an Account

To allocate term users to an account:

1. Log in to your Service Provider account.
   The Overview page for your Service Provider inventory opens.
2. Select Inventory > Compliance Reporting > Allocation.
3. If the account does not have any users allocated, click Allocate Users. To edit an existing allocation for an account, in the table, select the name of the account you want to update.

4. From the Account Name drop-down list, select the account you want to allocate users to.
5. From the Product drop-down list, select Compliance Reporting.
   The number of unallocated users available in the license shows in the upper section of the page.
6. From the Allocation Type drop-down list, select Term.
7. In the Quantity text box, type the number of users you want to allocate to the account.

8. By default, expiration of the allocation is set to Never. To specify an expiration date, select Custom.
   Select an expiration date of 1 month, 3 months, or a year. You can also select a date from the calendar.
9. Click Save.

If your Service Provider account has term and subscription licenses and the term license becomes overallocated, your managed accounts with term allocations are overallocated and become unavailable. Subscription allocations are not affected.

Allocate Subscription Users to an Account

If you purchased a subscription contract through a distributor, you can allocate users with a subscription allocation to your accounts.

Caution: If you allocate an unlimited number of subscription users to an account, your Service Provider account could become overallocated. If this happens, there is a seven-day grace period and then the Compliance Reporting reports are no longer available. For more information, go to Overallocation.

To allocate subscription users to an account:

1. Log in to your Service Provider account.
   The Overview page for your Service Provider inventory opens.
2. Select Inventory > Compliance Reporting> Allocation.
3. If the account does not have any users allocated, click Allocate Users. To edit an existing allocation for an account, in the table, select the name of the account you want to update.
   
4. From the Account Name drop-down list, select the account you want to allocate users to.

5. From the Product drop-down list, select Compliance Reporting.

6. From the Allocation Type drop-down list, select Subscription.
7. In the Usage-Based Billing section, select an allocation option:
   • Unlimited number of users — Select this option to allow the account to add any number of users to their account.
   • Limit the number of users — Select this option to limit the maximum number of users for an account.
8. If you want to limit the number of user licenses, in the Maximum Number of Users text box, type the maximum number of users you want to allocate to the account.
   
9. Click Save.

Remove the License or Deallocate Users

When you remove a license, you remove the entire license and product from an account. If you remove a license, there is a seven-day grace period before access to the reports is disabled. For more information, go to About WatchGuard Compliance Reporting Licenses.

When you deallocate users, Compliance Reporting no longer reports on data from the affected user devices. If your account becomes overallocated, Compliance Reporting reports are not available. Tier-1 Service Provider accounts can become overallocated when an account they manage allocates more users than there are available in the license.

To identify accounts that are over their limit, review Subscriber dashboards and audit logs. When an account is overallocated, we recommend that you reduce the number of allocated users (deallocate), or increase the number of users in the license.

To deallocate users:

1. From the Allocation table, select the account you want to deallocate users for.
   The Edit Allocation page opens.
2. To remove all users, in the Quantity text box, enter 0.
3. Click Save.

To remove a license:

1. From the Allocation table, next to the account you want to remove the license from, click and select Remove License.

2. In the confirmation dialog box, click Remove License.
   When there are no licenses, the account displays an Unlicensed label.

Related Topics

About WatchGuard Compliance Reporting Licenses

Activate a WatchGuard Compliance Reporting License