Tenant Admins

Accounts with the Admin Access permission are tenant administrators. You can see this on your own account under Accounts > Users > Permissions. This grant the account permission to obtain the https://api.quasr.io/scopes/admin scope.

Notice the Admin Access permission on a tenant admin account.

Onboarding New Admins

You can create new accounts with admin permissions. Upon creation you'll get an invite token which you can send to your intended admins. They can use this invite token on your Hosted Login UI to start the signup process.

Signup using an invite token on the Hosted Login UI.

Your Admin UI URL is https://admin.quasr.io/{{TENANT_ID}}/{{CLIENT_ID}} where the Client ID is the ID of the Admin UI which you can find under Accounts > Clients. You can also find the URL in your browser in the Admin UI as well as under Tenant Setting.

Please be mindful that with Quasr all users live in their tenant, meaning that your admins need an account in your tenant - and not in the Quasr root tenant. So if they sign up with Quasr the account ID shown in the Account UI is not relevant as it lives in the root tenant. You can of course choose to allow Login with Quasr, and this will allow them to sign up in your tenant using their Quasr account.

Internal vs External

An important detail is the External flag on each account. This flag indicates whether the account is not part of your organization, and needs to be considered as an external customer. Hence for tenant admins this should in most case be set to false (i.e. unchecked).

External flag on account

The effect of the flag is that for internal (i.e. not external) accounts legals won't need to be accepted explicitly. As these accounts are part of your organization they will accept these as part of their work arrangement. Furthermore internal accounts can signup using non-public factors.