Managing Other CloudM Automate Domains

Navigation: Directory > Managed Domains

Overview

CloudM Automate allows you to manage other external CloudM Automate domains in a "hop-to" manner, typically used to bridge separate Google Workspace tenants. This feature is especially helpful where domains are managed by a third party, or where an administrator needs access over several domains (such as different brands) within the same company.

Note: There is no "Add Domain" button on this screen; you will only see external CloudM domains that your specific user profile has been granted explicit access to.

Roles & Permissions

It is possible for users to be given permission to access a domain or domains that they are not a member of, essentially allowing an external contact to manage users or core functions on your domain (or allowing you to manage users or core functions on another domain), based on the permissions that have been granted to them on the specific domain.

A specific role can be created via Settings > Roles to grant access to external user profiles or groups with specific permissions.

Prerequisites and Configuration

Configuration starts with Roles on the "Host" Domain; the Host must grant permissions to the Managed Domain users or groups. When these permissions are granted to another CloudM Automate user or group, they will see Managed Domains in their CloudM Directory menu.

1. Go to Settings > Roles > Create a new role.
2. Provide a Role name (e.g., "Managed Domains - External Profile") and select the Scope (Global, Specific OU, OU and Child OUs, Parent OU).
   
3. Choose the permissions the External Profile (user from the other CloudM domain) should have. Note that the View Managed Domains permission (defined as "View all users and groups invited to manage external domains") is required for the user to see the external domain list.
   
4. Select Assigned users > Add new assignment and choose Assign to > External Profile or External Group from the other CloudM domain.
   
5. Enter their email address in the External Profile field.
6. The Org Unit Scope allows you to restrict this assignment to a specific org unit if an OU scope was chosen in step 2.

Accessing and Managing an External Domain

Once permissions are granted, the assigned user can "hop-to" the host CloudM instance.

Note: This is not a view within your own platform; you are navigating to the host instance and back when finished.

1. Log in to your domain.
2. Navigate to the Administrate > Managed Domains section and select the domain.
   • Alternatively, select the Profile icon (represented by your profile picture in the upper right-hand corner of the screen) and select the Switch Domain button.
     
3. A prompt will appear, click Continue.
   
4. A header banner will appear at the top of the screen showing "You are now logged into the external domain..." and "Back to..." to return to the host domain.
   

On the Managed Domains screen, you can review information about the domain, such as the number of Active Users, Suspended Users, Contacts, and Groups.