Nebula Control Center (NCC) Enhancements for MSP Admins & Teams

Zyxel_Claudia

The latest release of Zyxel’s Nebula Control Center (NCC) version 18.20 introduces powerful enhancements for Managed Service Providers (MSPs), focusing on greater flexibility and control in managing administrator privileges and account statuses. These updates enable more granular access management across organizations and sites, catering to MSPs who oversee multiple clients or locations. This article explains the new privilege levels, how to manage overlapping account settings, and the rules that determine final permissions and statuses.

Enhancements for MSP Administrators in NCC 18.20

1. Previously, MSP admins could only assign organization-wide privileges (such as read-only) to admins, limiting control over site-specific permissions.
2. With NCC 18.20, MSP administrators can now assign site-wide privileges to individual accounts. These include levels like “Full,” “Read-Only,” “Monitor-Only,” “Installer,” and “Guest Ambassador” allowing MSPs to tailor access more precisely to each user’s role.
3. Organization-Level vs. Site-Level Privileges:
   • Mutually Exclusive Selection: When assigning privileges, administrators must choose between organization-wide privileges or site-specific privileges for each account. An account cannot simultaneously hold both organization-wide and site-specific privileges within the same organization.
4. Merging Administrator in Privilege Assignments:
   • If an admin account has both MSP Admin and Organization-wide Administrator privileges in different contexts (e.g., through MSP-level assignment and directly within the organization), the highest privilege level takes precedence.
   • For example, if an account has a “Full” organization-wide privilege from MSP settings but “Read-Only” at the organization level, the final effective privilege will be “Full.”
5. Merging Account Status
6. When an account is active in one area (MSP-level or organization-level) but deactivated in another, the organization-level setting takes precedence for the final account status.
7. For example, if an account is “Expired” at the MSP level but “Deactivated” at the organization level, the final status will reflect Deactivated to prevent access.

Final Account Privilege and Status Determination

• Privilege: The highest privilege level assigned to an account (between MSP-level and organization-level) becomes the effective privilege for both organization and site levels.
• Status: The final account status, whether active or inactive, follows the organization-level setting, which overrides MSP-level status.

Key Benefits of the NCC Enhancements for MSPs

1. Flexible Role Assignment: MSPs can now precisely control each admin’s access, adjusting privileges based on site-specific or organization-wide needs.
2. Simplified Account Management: By centralizing the final privilege and status determinations to organization-level settings, Zyxel has made it easier for MSPs to manage accounts efficiently.

Conclusion

The new MSP administrator and team enhancements in NCC 18.20 make Nebula an even more robust platform for MSPs and organizations with complex access needs. With the ability to assign site-specific privileges and centralized status control, Zyxel has provided a practical, secure way to manage access across multiple client organizations.