MSSP Customer Management

This guidance is intended to help our Rapid7 Partners who are operating as Managed Security Service Providers (MSSPs) using Rapid7 Insight products for a set of Managed Customer accounts. As an MSSP, you need to be able to extend your security analyst users access to the customer accounts they are responsible for managing. Rapid7 has introduced a new self-serve function to enable you to perform these user access management tasks independently.

Establish the Partner-Managed Customer relationship

Before you are able to grant your security analysts access to a Managed Customer account, the Managed Customer must first agree to be managed. This approval process is facilitated through Rapid7.

To create a Partner-Managed Customer relationship:

1. You should contact your Rapid7 representative with details for the customer you wish to manage.
2. The Managed Customer needs to have an Insight Platform account licensed with one or more Insight products. This can be either an existing account or one created by request through Rapid7.
3. Rapid7 will establish the relationship between your Partner account and the Managed Customer account.
4. The Platform Administrator for the Managed Customer account will receive an email requesting approval for the partner to manage customer access.
5. The Platform Administrator should follow the link provided in the email in order to log in to their account and approve the access request.
6. Alternatively, the Platform Administrator can approve the access request by navigating to the Company Settings tab in the left menu. From here, they will select the External User Settings tab and click the green Approve Access button.
7. You are now able to manage the customer account.

Access Customer Management

As a Partner Platform Administrator, when you first log in to your Primary customer account on the Insight Platform, you will see a new Customer Management icon appearing at the bottom of the left menu. This new function will allow you to manage user access for your managed customers.

To access a Managed Customer account:

1. Click on the Customer Management icon in the left menu, then select Customers.
2. From here, you can manage which accounts your security analysts can access.
3. You can view all customers that you currently manage, the Insight products they own, as well as the number of users that are assigned to each Managed Customer.
4. For any Managed Customer that has not yet approved the Partner to manage their account, the account status will appear as pending until they are approved. The pending status is indicated by a yellow, triangular symbol on the Managed Customer name.

Assign one or more users access to a Managed Customer

Any user within your Partner Primary account can be granted access by a Partner Platform Administrator to any approved Managed Customer.

To assign users to a Managed Customer:

1. Navigate to the Customers page within Customer Management.
2. Click the name of the customer you wish to add user access to.
3. Click the Assign User Access button.
4. Select the Partner Primary user(s) you want to grant access by typing the name of the user into the provided field or selecting the user from the dropdown list.
5. Configure the access privileges the user(s) will be given by selecting the following:
   • Determine whether they are to receive Platform Administrator access within the Managed Customer.
   • Determine how long this access is valid for. This can be permanent, meaning until they are removed by Partner Administrator at some point in the future, or time-bound. For example, 24 hours, 48 hours, or a custom duration.
6. Click Next.
7. You can now assign both a product role and what products the user(s) will have access to within the Managed Customer account.
8. Click Next.
9. Review the Access Request Summary and use the Back button if changes are required.
10. Click Submit.
11. The user access assigned to the customer will be updated upon refresh.

Assign a user access to one or more Managed Customers

To assign one or more Managed Customer accounts to a user:

1. Navigate to the Users page within Customer Management.
2. Click the name of the user you wish to add customer access to.
3. Click the Assign Customer Access button.
4. Select the Managed Customer(s) you want to grant the user access to by typing the name of the customer into the provided field or selecting the customer from the dropdown list.
5. Configure the access the user will be given to all chosen customers by selecting the following:
   • Determine whether they are a Platform Administrator.
   • Determine how long this access is valid for. This can be permanent, meaning until they are removed by the Partner Administrator at some point in the future, or time-bound. For example, 24 hours, 48 hours, or a custom duration.
   • You can choose to add a comment that will be included in an email notifying Platform Administrators in the Managed Customers of a new user receiving access.

6. Click Next.
7. You can now assign both a role and what products the user will have access to within each individual Managed Customer account, starting with the first selected customer and progressing in sequence.
8. Click Next.
9. Review the Access Request Summary. Use the Back button if changes are required.
10. Click Submit.
11. The customer access assigned to the user will be updated upon refresh.

Remove Managed Customer access

To remove Partner access from a Managed Customer account:

1. Navigate to the Customers page within Customer Management.
2. Locate the customer you wish to delete in the Managed Customers table.
3. Click the minus icon.
4. Click Yes, remove access button to confirm.

Remove user access

There are 2 options for removing user access to a specific Managed Customer account.

Option 1

1. Navigate to the Users page within Customer Management.
2. Locate the user you want to make changes to.
3. Click the User name or the View User link to see the details of all Managed Customers the user has been assigned access to.
4. To remove the user from a specific Managed Customer, click the minus icon to the right of the customer name.
5. Click Yes, remove access to confirm.

Option 2

1. Navigate to the Customers page within Customer Management.
2. Locate the customer you want to make changes to.
3. Click on the customer name to view details of all assigned users.
4. Click the minus icon opposite the user that you wish to remove from the Managed Customer.
5. Click Yes, remove access to confirm.

View user-managed customer assignment

As a Partner Platform Administrator you can easily view which security analysts are assigned to each of your managed customer accounts.

To view a summary of Managed Customer assignment for all users:

1. Navigate to the Users page within Customer Management.
2. This presents a list of all Partner users (security analysts) and which Managed Customers they have been currently assigned.

To view a particular user's assignment to Partner managed customers:

1. Locate the user you wish to view and click on their User name or the View User link to the right.
2. You can now view the user’s email, time zone, and further access details within each Managed Customer.

To view user assignment for a particular Managed Customer from the Customers tab:

1. Navigate to the Customers page within Customer Management.
2. Click on the Customer Name.
3. A list of assigned users is presented, including:
   • User Platform Administrator status within the Managed Customer
   • Product access details
   • Last access time
   • Access status - permanent or time limited

Edit User Access

To update a user’s Platform Administrator status and duration of access in a given managed customer:

1. Navigate to the Users page within Customer Management.
2. Click on the name of a user or the View user link on the right of the Users table.
3. Locate the Managed Customer you would like to edit this user’s access for and click the pencil icon on the right of the table.

This will open a page where you can toggle the Platform Administrator status of the user, as well as alter the duration of their access to the Managed Customer. Once you have made your changes and clicked Next, you’ll be presented with a Summary page.

The Summary page contains an Updated tab that allows you to view how the access connected to this user account will update after your changes have been saved. Request details will contain any updates to the Platform admin status or expiration date for the duration of the access. Any change to the expiration date will include an update icon. There is also an Original tab that shows what the initial access for this user was before any changes have been applied.

Edit a managed customer name

Partner Platform Administrators have the ability to update or change the name of managed customers.

To change the name of a Managed Customer account:

1. Navigate to the Customer Management - Customers page.
2. Click on the customer you wish to rename.
3. Click on the Edit Customer Details button on the top right of the screen.
4. Enter the new name and click Save.

The customer’s name will now be updated throughout the Insight Platform.

Customer Navigation Experience

Upon login to the Insight Platform, you will be presented with a Customer Table containing all the Managed Customers you have access to, with your Primary Partner Customer pinned to the top of the table. Platform Administrators for the Primary Partner Customer will see a Manage Customers button on the top right of the page that links directly to the Customer Management - Customers page.

By clicking on a Customer Name in this table, you can navigate to any of your Managed Customers’ Platform Home to access their products, as well as User Management and other settings if you have a Platform Administrator role for that customer.

To change which Customer you are currently viewing, you can click the View Customer Table link at the top of the page at any time. This will return you to the Select Customer Account table.

Managed Customer Experiences

As explained in the Establish the Partner-managed customer relationship section, a Platform Administrator within the Managed Customer must approve any Partner requests to manage their account. A Platform Administrator within the Managed Customer can also perform two related actions once this relationship has been established in the Company Settings tab:

• They can change their email notification settings. For example, whether they wish to get notified when Partner user access is granted or removed from their customer account.
• They can remove Partner access from the customer account. In this case, the Partner would no longer have authority to grant access to Partner users for the customer account.

Create a Managed Customer POC

Partner Platform Administrators can create new Managed Customer prospects for the purpose of performing a free proof of concept (POC) of Rapid7 security solutions. The duration of the POC will be time limited, after which you can reach out to Rapid7 should the prospective customer wish to progress to a paid-for service.

To begin creating a new Managed Customer, click Create New Customer in the upper right corner of the Manage Customer Access screen. This will open the Create New Customer form:

1. Enter the Customer Account Details of the new Managed Customer.
2. Enter the Customer Address Details of the new Managed Customer.
3. In the First User Details dropdown menu, select which existing user (linked to your MSSP Partner account) will be able to access the new customer you are creating.
4. In the Add Product License section, select the products that you wish to grant to the new Managed Customer for POC evaluation.
5. Select the Data Storage Region where the products will be deployed.
6. Finally, click Create New Customer at the bottom of the form.

The process will take a short time to complete. Upon completion, you will be returned to the Manage Customer Access screen where you will be able to see details of the new Managed Customer that you have created.

The user that has been granted access can then immediately sign in and access the new Managed Customer account using the Select Customer Account table. Additional Partner users can then be added to this Managed Customer by clicking the Customer Name, then by clicking Assign User Access.

Create a POC for existing Managed Customers

For existing Managed Customers, you can also add new product POCs using Create New Product License:

1. Click the Customer Name from the Manage Customer Access table.
2. Click Create New Product License.
3. Select the products to add as POCs for the Managed Customer.
4. Select a Product Administrator.
5. Finally, click Create New Product License.

Once the new POC has been created, users can be assigned to the product within the User Management section of the Insight Platform by any Platform Administrator.

Extend or purchase a license

In the case that your customer would like to extend their POC or proceed to purchase the product, you can start the process by contacting Rapid7 with a formatted email:

1. Click the Customer Name from the Manage Customer Access table.
2. For each product, select Extend POC License or Purchase License as required.

This will generate an email with specific product details for your Rapid7 representative.

Delete a Managed Customer

Any Managed Customers that you created for the purpose of a POC can also be deleted. By deleting a Managed Customer, all the products and data associated with that customer will be erased. This includes any users created within that Managed Customer account.

To delete a Managed Customer:

1. Navigate to the Customer Management - Customers page.
2. Click the Customer Name from the table.
3. Click on the Delete Customer button below the Customer’s name.
4. Click Delete Customer to confirm the deletion.

Alternatively:

1. Navigate to the Customer Management - Customers page.
2. Click on the trash icon on the right of the table for the customer you want to delete.
3. Click Delete Customer to confirm the deletion.