Multi-Tenant Customer Management With an MSP Account

A UniFi MSP Account provides centralized, multi-tenant management for Managed Service Providers (MSPs) supporting multiple customer organizations. Manage your internal team and Identity Provider (IdP) once, then delegate access to the customer environments they support without individually adding each technician to every customer site or organizational Fabric in Site Manager.

Each customer retains independent control of their own UniFi sites, users, identity, and permissions.

How MSP Accounts Work

An MSP Account represents your organization and team within UniFi Site Manager. It provides a centralized location to add or remove team members, integrate your organization’s IdP, and control which customers each team member can manage.

Customers then delegate access to your MSP Account rather than individual employees. This simplifies onboarding and offboarding as your team and customer base grow.

Customer environments remain independent. Each customer may have their own users, Identity Provider, permissions, and sites within their organizational Fabric.

Creating an MSP Account

We recommend creating the MSP Account using a company-owned Ubiquiti account (for example, it@yourmsp.com) rather than an individual employee’s account. This helps maintain continuity as personnel change.

1. Sign in to your UI Account (or sign in to Site Manager and click your profile icon in the upper right corner).
2. Select Account.
3. Enter your business name to create the MSP Account.
4. Optionally bind your Identity Provider (IdP) for directory sync and automated onboarding and off-boarding of employees.
5. Optionally enable Enforce IdP Authentication. This enforces SAML authentication for anyone signing in to Site Manager and other ui.com domains globally, not just to this Fabric. 
   Note: This is only available for cloud IdPs like Microsoft Entra or Google Workspace, and can only be done once per email domain.

Once created, the MSP Dashboard appears in Site Manager.

Adding Customers

Customers grant your MSP Account delegated access to their UniFi environment without transferring ownership or individually inviting your technicians.

1. Open the MSP Dashboard.
2. Select Customers > Add Customer.
3. Select the customer Fabric(s) to add.
4. Click Send Request.

At least one MSP Account admin must already have access to the Fabric before requesting delegation.

The Fabric owner will receive a request in Site Manager to approve access. Once approved, authorized members of your MSP team can manage the customer according to their assigned permissions.

Adding Teammates and Delegating Permissions

MSP Accounts can delegate scoped permissions to their teammates across the various customers they manage.

1. Navigate to Site Manager > MSP Dashboard.
2. Select My Team.
3. Click New Person
   1. Alternatively, bind an Identity Provider in the Account Settings to sync users automatically.
4. Assign the desired access level across customers.
   Note: More increased permission granularity, create a role directly in the relevant customer Fabric.

For more information, see Managing UniFi Fabric People, Roles, and Permissions.