Good practice: Managing roles through Cloud User Hub groups
Cloud User Hub provides fine-grained Role-Based Access Control (RBAC).
This makes it possible to grant users very specific access to certain functions and customers in Cloud User Hub.
One of the primary benefits of our RBAC approach is that your technicians can execute tasks that would normally require Microsoft Partner Center permissions, without giving them access to Partner Center.
When assigning permissions you set the organization scope, this is the customers the user has the selected permissions for.
Manage roles through Cloud User Hub groups
As the available roles allow for such granular settings when assigning them, role management, if not performed efficiently, can become quite time-consuming with the potential for human error when repeatedly performing a similar action.
Because of this we strongly recommend always managing roles through Cloud User Hub groups.
Save time with Cloud User Hub Groups
The primary benefits of managing Cloud User Hub roles through groups are consistency and efficiency.
When you create a role and assign it to a group, any users you add to that group will inherit these permissions.
As circumstances change and you need to change the scope of a role (for example, when onboarding a new customer), you only have to make this update once for each role assigned to the group.
If not using a group, you would need to update each role assigned to a user with a new scope.
Groups also make it simpler to onboard and offboard users, assign the user to a group where they will inherit the group permissions then remove went this access is no longer required.
This would cost significantly more time and is the main reason we highly recommend managing Cloud User Hub roles through groups.