Managing Organization IT Admins in Trio MSP
Organization IT Admins are responsible for managing devices, policies, users, and operational configurations within specific customer organizations. Unlike MSP Admins (who operate at the MSP level), IT Admins are scoped to one or multiple assigned organizations.
This article covers:
IT Admin overview
Adding a new IT Admin
Assigning organization access and roles
Viewing and editing IT Admin details
Understanding access states and MFA status
Log activity monitoring
IT Admins Overview
Navigate to:
Admin Center → IT Admins
This section displays all organization-level administrators managed under your MSP.
The IT Admins List Includes:
Name – The administrator’s full name (with “You” tag if it’s your account).
Display name – The internal username shown across the platform.
Email – The login email address.
User state – Active or Inactive.
Access to – The organizations the admin can manage.
MFA status – Multi-Factor Authentication configuration.
Actions menu (⋯) – Manage or modify the admin.
If no IT admins exist, you will see:
“Add and assign IT admins to organization”
Use + Add IT admin to create the first administrator.
If you do not have permission, an Access denied screen will appear.
Adding a New Organization IT Admin
To create a new IT Admin:
Go to Admin Center → IT Admins
Click + Add IT admin
The creation process is divided into two main steps:
Step 1: IT Admin Information
Step 2: Organization Access
Step 1: IT Admin Information
Fill in the required fields carefully.
Required Fields
First name*
Last name*
Display name*
(This is how the admin will appear inside the platform.)Company email*
(Primary login email)
Optional Sections
You may also configure:
IT Admin Security Settings
IT Admin Personal Information
Click Next to continue.
IT Admin Security Settings
This section allows you to define security controls at the time of creation.
Available Options
MFA enforced
Forces the admin to configure Multi-Factor Authentication.
You can define how long they have to complete setup (e.g., 7 days).
Auto-generated temporary password
Generates a temporary password for first login.
Expires after 48 hours.
Optional: Force password reset after first sign-in.
MFA allowed method
Email OTP
Other configured methods (if available)
This ensures compliance with your MSP-level security policies.
IT Admin Personal Information (Optional)
You can optionally complete the admin’s profile.
Fields Include:
Profile photo (drag & drop upload)
Home address:
Country
Province/State
City
Address
Postal code
Contact information:
Alternate email
Phone number
Birthday
Description
This information helps maintain structured employee records but is not mandatory for access.
Step 2: Organization Access
After completing basic information, you must assign organization access.
Navigate through:
Admin Center → IT Admins → Add admin → Organization access
This section defines:
Which organizations the IT Admin can manage
What role they will have inside each organization
Assigning Organizations
You will see a searchable organization list with:
Organization name
Portal link
Region
Trio license status (Active, Expired, Need renewal)
Admin role selector (Required)
To assign access:
Select one or multiple organizations using the checkboxes.
Choose an Admin role from the dropdown.
Click Save new admin.
Without selecting a role, the admin cannot be created.
Viewing IT Admin Details
To open an admin profile:
Go to Admin Center → IT Admins
Click on an admin’s name
You will see three tabs:
Access
Details
Log activity
Access Tab
This tab shows:
Assigned organizations
Admin role per organization
License status of each organization
Region information
This allows quick visibility of scope and privileges.
Details Tab
The Details section contains:
IT Admin Information
First name
Last name
Display name
Company email
IT Admin Personal Information
Profile photo
Address
Contact info
Birthday
Description
On the right panel, you’ll see Key Highlights:
Work email
Display name
Last login
MFA activation status
Quick action to activate MFA (if not enabled)
You can update information and click Save or Discard changes.
Log Activity Tab
The Log Activity section tracks all administrative actions performed by the IT Admin.
The activity table includes:
Name – Action performed (e.g., Login, Password Reset, Group Added)
Category – Authentication, Groups, Integration, Platform Adjustments, Users
Role – Role used during the action
Date & Time – Exact timestamp
Available controls:
Search bar
Sort options
Filters:
Event names
Category
Admin
Date & Time
Export button
This provides full audit traceability for compliance and security reviews.
Understanding User States
IT Admin accounts can appear as:
Active – Account can log in and manage assigned organizations.
Inactive – Access is disabled.
Access denied – Displayed if the current user lacks required permissions.
User state and MFA status should be monitored regularly to ensure secure administration.