MSP fleet and customer switching

Fleet lets a managed service provider (MSP) link to customer organisations. A customer must accept the link before it becomes active.

Who can use it

• The Fleet page needs the Manage organisation settings permission (org.settings.manage) and the MSP or Enterprise plan.
• If your plan does not include it, the Fleet page shows “Fleet management is part of the MSP and Enterprise plans” and a button to open Billing. The Fleet item only appears in the left menu when your plan has access.
• Without the permission, you can see the list but not invite or revoke.

Invite a customer

1. Open Fleet under Operations.
2. Enter the customer’s organisation ID. It starts with org_.
3. Select Invite customer.

The link starts as Pending. The only access type today is read access to the fleet. A delegated admin type is refused as not available yet.

Accept an invite (customer side)

1. In the customer organisation, open Settings, Managed access.
2. Find the pending request from the managing organisation.
3. Select Accept. Only the customer’s primary owner can accept.

The status changes to Active.

Revoke access

Either side can revoke. On the Fleet page or in Settings, Managed access, select Revoke and confirm. Revoked is final. The server also removes the managed memberships tied to that link.

Switch organisation

If you belong to more than one organisation, use the organisation switcher in the app header to change between them.

1. Open the switcher and pick the organisation.
2. Velauth clears the cached data of the old organisation, signs in to the new one, and returns you to the home page.
3. If the new organisation requires two-factor authentication, you must be able to complete it, or the switch is refused.
4. If the server returns a different organisation than you asked for, Velauth signs you out.

What is recorded

• Switching writes an entry in each organisation’s admin audit: org.switch.out in the one you left and org.switch.in in the one you entered. Refused attempts are recorded as Denied.
• Not yet verified on a lab: whether invite, accept and revoke write their own audit entries. The fleet function does not write one in the code.

What it does not do

• It does not show live numbers yet. “Agents online”, “Pending approvals” and “Last audit activity” on each customer card read “not yet available”.
• It does not give the MSP admin rights in the customer organisation. Access is read only.
• It does not let anyone accept their own invite on behalf of a customer.