You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We are happy to announce that parent org admins can now configure the users to view and SSO into child organizations. Previously, any user with the **View Organizations** capability could view and SSO into all child orgs. Now, users with the **Manage Organizations** capability can define access on a per-child-org basis, giving you more precise control over who can sign in where. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-org-settings/#manage-and-view-access-to-child-org).
Copy file name to clipboardExpand all lines: docs/manage/manage-subscription/create-and-manage-orgs/manage-org-settings.md
+29Lines changed: 29 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -111,6 +111,35 @@ You must be the account owner of the Sumo Logic account to change the account su
111
111
1. Click **Change Subdomain** Name to update the name.
112
112
1. You will be automatically logged out and redirected to the new subdomain login page.
113
113
114
+
## Manage and view access to child org
115
+
116
+
This section has instructions for managing and viewing the access for the selected child org.
117
+
118
+
By default, if you are a user with **Manage Organizations** capability you will be able to see all the child orgs in your parent org and you can configure the users to view and SSO into child organizations. This helps you to define access on a per-child-org basis and precisely control over the sign in process.
119
+
120
+
But if you are user with only **View Organizations** capability you can see the child orgs with the default access and the child orgs that are assigned to you.
121
+
122
+
### Manage access to child org
123
+
124
+
Follow the below steps to manage access to the child org:
125
+
126
+
1.[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Administration > Organizations > Manage Account**. <br/> [**New UI**](/docs/get-started/sumo-logic-ui/). In the main Sumo Logic menu select **Administration**, and then under **Organizations** select **Manage Account**. You can also click the **Go To...** menu at the top of the screen and select **Manage Account**.
127
+
1. Click the child org for which you want to restrict the access.
128
+
1. In the right hand pane, click on **More Actions** dropdown and select **Manage Access**.<br/><img src={useBaseUrl('img/manage/subscriptions/child-org-manage-access-button.png')} alt="Child Org Manage Access Button" style={{border: '1px solid gray'}} width="400"/>
129
+
1. On prompt, select any of the following:
130
+
-**All Users with View Organization Capability**. By default, users with **View Organization** capability can view the child orgs.
131
+
-**Only Selected Users**. Select this option if you want to restrict your child org to a selected number of users. On selecting this option, you will be prompted to select the list of users on the parent org for whom you need to provide the access.<br/><img src={useBaseUrl('img/manage/subscriptions/select-users-prompt.png')} alt="Select Users Prompt" style={{border: '1px solid gray'}} width="400"/>
132
+
133
+
### View access to child org
134
+
135
+
Follow the below steps to view the child orgs access details:
136
+
137
+
1.[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Administration > Organizations > Manage Account**. <br/> [**New UI**](/docs/get-started/sumo-logic-ui/). In the main Sumo Logic menu select **Administration**, and then under **Organizations** select **Manage Account**. You can also click the **Go To...** menu at the top of the screen and select **Manage Account**.
138
+
1. Click the child org for which you want to view the access details.
139
+
1. Scroll down in the right pane to the **Access Control** section. You can see one among the following:
140
+
-**All users with view organization capability**. This will be displayed if the selected child org is configured with view for all users.
141
+
-**[X] users have access to this organization**. This will be displayed if the selected child org is configured only for selected number of users. **X** indicates the total number of users who have access to the selected child org. Click on this number to get a full list of users with access.<br/><img src={useBaseUrl('img/manage/subscriptions/child-org-access-control.png')} alt="Child Org Access Control" style={{border: '1px solid gray'}} width="400"/>
142
+
114
143
## SSO for child organizations
115
144
116
145
When you create a new child organization, a subdomain is automatically created and single sign-on (SSO) is enabled, allowing you to sign in to the child organization without having to provide separate credentials. To use this feature you do not have to set up SAML for single sign-on for the child organization.
0 commit comments