This article applies as of PRTG 25
Access Rights Management
You can configure access for managing some aspects of your PRTG Hosted Monitor instance through the customer portal here. Here you can manage and grant permissions to the invited users.
Note: This function does not allow you to configure access rights on your PRTG Hosted Monitor instance. For more information, see the Access Rights Management section in PRTG Manual.
Content
This article explains the access rights management system in PRTG Hosted Monitor. Using access rights, subscription owners can promote other users to manage and configure certain aspects of a PRTG Hosted Monitor instance. With access rights, users can do the following actions:
- Change the PRTG subdomain
- Change the set time zone in PRTG
- Configure a multi-platform probe connection
- Set up instance-wide multi-factor authentication
- Restart the PRTG Hosted Monitor instance
- Upload files
- Configure Entra ID authentication
Step 1: Invite users
On your PRTG Hosted Monitor instance, you can invite new users. For more information please see the Add User Accounts section in the PRTG Manual.
Step 2: Set roles to invited users
Go to the PRTG Users section on app.my-prtg.com.
Set the access level based on the following roles:
| Role | Description | Notes |
|---|---|---|
| Owner | There can only be one subscription owner. Has full access to instance management, subscription details and invoices. | You cannot change another user to be subscription owner. To do this, please contact our customer service team via service@paessler.com |
| Admin | Has the same access as the Owner, except for invoices and subscription settings. | Users can be promoted to this role by the owner or another admin. |
| User | The default role for any invited user. Can see the instances(s) he/she was invited to, but no access to any settings or subscription details. | Admin Users can be demoted to this access level again. |
Limitations
Users who were invited with the login type "Federated Directory User" are not listed in the overview of invited users. These accounts can only log in to their PRTG Hosted Monitor instance and not through app.my-prtg.com. For more information, please see How to integrate Microsoft Entra ID into PRTG Hosted Monitor?
In case you want to promote such a user as well to be admin on app.my-prtg.com for your instance, it requires an additional non-federated user account in our backend. The easiest way to accomplish this, would be the following:
- Head to Setup | System Administration | User Accounts in your PRTG Hosted Monitor instance.
- Delete the regarding user account there.
- Invite the user again with the same email address, but this time using 'Login Type' Auth0 (default).
- The user gets another invite email. By following the link in the invitation email, the user can then set a password for this account, which is not related to your Entra ID.
- With these credentials the user can log in to app.my-prtg.com then as well and will also be listed on the PRTG Users page.
- The Entra ID login for the PRTG Hosted Monitor instance will continue to work, as it automatically redirects all users to your Entra ID for authentication with a matching email domain.
