Hi,

I am curious to see how Manage Engine / community handle customers internal IT access into EPC MSP.

I have a customer who has their own internal IT and assigning the customer administrator role seems to give them more options than i feel would be required, there is already a previous post around when deploying a package from template they have the option to deploy to all managed customers which is a big no no.

Secondly, with them having client administrator role they are able to create a new service plan, associate or dissociate a plan assigned to their customer. I do not understand why a client would need this functionality and can cause all kinds of issues with billing if they are to play around with billing.

I tried creating a custom role which gives the customers internal IT access which removes the billing aspect however you then lose functionality from the admin tab. 

I can't be the only MSP which has customers although managed require access to EPC for their own internal use for remote access, software deployment etc? The fact i can't find a role which removes the ability for a customer to select a software package from template and push it to all my other customers is frustrating and a complete road block.