External administrator roles

External administrators are administrators from outside your organization.

You can assign external administrators as a way to access your organization in case of emergency sign-in issues, such as if SSO isn't working properly for a SSO-configured organization.


 

Anyone outside your organization that has access to your organization’s Control Hub is shown in the Users section under the External Administrators tab.

There are three external administrator types:

  • External full administrator—External full administrators have many of the same permissions as internal full administrators. External full administrators can manage users, devices, licenses, and troubleshoot issues the same as an internal full administrator.

     
    External administrators must sign in to Control Hub after being assigned the external full administrator role before they can get admin access to meeting sites.
  • External read-only administrator—External read-only administrators are users that can view your organizational settings and templates, but not make any changes. Support staff that access your organization generally have the role of read-only administrator. Read-only administrator access is automatically revoked after some time. You can grant or deny administrative access to anyone.

Assign external administrators as full or read-only administrators in order to clearly define what their responsibilities are in your organization. Dividing administrative responsibilities can also ensure greater accountability within your organization.

AccessExternal full administratorExternal read-only administrator
User Management✔Read-only
Device Management✔Read-only
Company Policy and Templates✔Read-only
Analytics and Reports ✔ Read-only
Troubleshooting✔Read-only
Support Metrics and Notifications✔Read-only
Licenses and Upgrades✔Read-only
Assign roles✔Read-only
Provision orders✔X
Add and delete sites✔X
Add external administratorsXX
Locations✔Read-only

Add external administrators

You can add anyone outside your organization as an external administrator to help maintain your Webex services and users. External administrators can't add additional external administrators to your organization.


 

Users in free self-sign up organizations can be added as external administrators. But, users that are part of the consumer organization can't be added as an external administrator. Control Hub will indicate an error when you try to verify the emails of users who are in the consumer organization.

1

Sign in to Control Hub at https://admin.webex.com, and open the Users page.

2

Filter the user list by All external administrators to see the list of external admins.

3

Click Add external administrator.

4

Enter the administrator's email address and click Verify email.

5

If this user belongs to a partner organization that manages your subscription, choose Full administrator privileges or Provisioning administrator privileges. If they are from any other organization, choose:

  • Full administrator
  • Read-only administrator
  • Contact Center service administrator (if applicable)
  • Webex site administrator (if applicable). You can then choose to assign users as full, read-only, or user administrators for each Webex site.
6

Click OK.

Manage external administrator privileges

You can choose what information is shared or withheld from external administrators.

As a full administrator of your organization, you can also adjust the administrator privileges for external administrators.

1

Sign in to Control Hub, then open the Users page.

2

Filter the user list by All external administrators to see the list of external admins.

3

Select the user you want to edit.

4

Choose one of the following:

  • To promote the administrator to a full administrator, under Administrator roles, check Full administrator privilege.

    If the administrator was set up with read-only privileges, you can promote them by going under Administrator roles and choosing Full administrator privilege.

  • To demote the administrator to a provisioning administrator, under Administrator roles, uncheck the Full administrator privilege check box.

    If the administrator was set up with read-only privileges and previously promoted to a full administrator, you can demote them by going under Administrator roles and choosing Read-only administrator privilege.


     
    You need to demote all external administrators at once for the system to save the change.

  • To completely revoke administrator privileges, under Revoke admin privilege, click Revoke admin privilege and then select Revoke privilege.


     

    Revoking administrator privileges deletes all record of the administrator, and they must be added again to reinstate them.