Welcome back
Your shortest path to people, clients, access, and system health.
Technicians
One person, one identity, and one clear place to control every client and vendor they can reach.
Technicians
Open a person to manage identity actions and client access. Yellow items need your attention; green items are ready.
Vendor Access
Only Intelligent IT-wide platforms live here. Toggle access on to grant it or off to revoke it immediately—there is no Save step.
Protected Accounts
Accounts excluded from technician sync and deprovisioning. Edit the list from the owning Client Site.
Activity
Run a sync, review changes, and see only the services that are actually active.
Service Status
Today's Syncs
Successful
Failed
Trigger Manual Sync
| Time | Action | Target | Domain | Status | Details |
|---|
Dashboard sign-ins
Successful dashboard sign-ins are recorded here. This page and its data are available only to your CDC account.
| Person | Username | Signed in |
|---|---|---|
| No sign-ins recorded yet. | ||
Everything the technician platform touches
Open a client workspace to see its active systems, primary endpoint, health, and exactly which technicians are tied to each service. Dormant and unconfigured catalog entries stay out of the way.
Client Sites
Everything belonging to a customer—identity, Google, permissions, and deployment—in one card.
Add a Client Site
Create the customer record first; its agent package is generated automatically.
Existing Client Sites
Open a client to manage all of its identity and access settings.
Advanced Agent Downloads
Normally you don't need these — use the ⬇ Download Agent for <client> button on a client above, which bundles both files below plus that client's pre-filled config and a one-click installer into a single zip. These separate downloads are here for troubleshooting or a manual setup.
Settings
Dashboard behavior, account access, and connected services—all in one place.
Technician Offboarding
Technician Backup
A live Excel recovery workbook containing the current Entra technician roster, client assignments, vendor access, and recent lifecycle history. It refreshes after every full sync and access change and can mirror the same file to the private IIT Administrators SharePoint site. Passwords and secrets are excluded.
Automatic Sign-Out
Sign people out after they stop using the dashboard. Mouse, keyboard, touch, and scrolling activity restart the timer; background syncing does not.
Email Delivery
Sends one complete technician onboarding email containing a private one-time page for access context, administrative rules, and central-password setup. Dashboard User invitations remain a separate administrator-login workflow.
-
In Entra ID, add the
Mail.Sendpermission (Application type) to this app's registration and grant admin consent — Reset Password's own Entra credentials don't cover sending mail, this is a separate permission. (Can only be done in the Entra portal itself — this page can't check or do it for you.) - Not set Pick a real mailbox in your tenant to send from, below.
Each of these is optional — leave one blank and that email sends from the shared mailbox above instead. Fill one in to have that kind of email show up in a tech's inbox from its own address (it needs to already be set up as an alias / proxy address on the shared mailbox in Microsoft 365 first — no extra license or permission needed for that part).
If a send still fails after both steps above are done, its error message will say exactly which one's missing.
UISP
Connects Vendor Access → 🧰 UISP's Create UISP Account / Update Role / Reset Password buttons to your real UISP instance — a real account is created directly (no invite email), with a password this dashboard generates and a role you can change any time. Generate the API key in UISP under Settings → Users → API tokens.
MSP360
Connects the single provider-wide MSP360 checkbox under Vendor Access to the real Managed Backup administrator account. Turning it on creates or enables the administrator; turning it off disables the account without deleting its audit history. Technicians sign in with their Intelligent IT Microsoft account. API credentials come from MSP360's provider account under Settings → General → API.
New technician administrators copy this account's MSP360 permissions and all-company scope. The template account itself is never changed.
WatchGuard SSO
The Vendor Access switch manages Entra SSO eligibility. For Tier-1 service-provider accounts, WatchGuard requires the operator and role to be created once in WatchGuard Cloud; the switch then grants or revokes sign-in immediately through the assigned Entra group.
Keep one owner account outside technician automation as the break-glass path. Technician accounts default to Helpdesk, never Owner.
Microsoft Entra Connection advanced
Current group: — · Tenant ID: —