# Manage Network Edge User Account and Permissions

The User Management feature allows primary administrators to grant granular permissions for Network Edge devices on a per-user basis.

> **Tip**
>
> It is important that you assign multiple users with the correct permissions, so that your organization does not have to rely on a single user to fix configuration errors or to get support. Also, it is best practice to have multiple primary administrators in your organization.

## Add Multiple Users[​](#add-multiple-users "Direct link to Add Multiple Users")

The Primary Administrator can send invitation emails to add more users in the organization. The administrator can also add single or bulk users from the Equinix Customer Portal.

To add multiple users:

1. Sign in and open the [Equinix Customer Portal: Fabric Dashboard](https://portal.equinix.com/fabric/dashboard) as the primary administrator.

2. Click the menu icon to navigate to the Equinix Customer Portal.

3. In the Customer Portal, select **User Management** on the **Administration** menu.

   ![](https://docs.equinix.com/assets/images/NE-IAM-perms-user-mgmt-40bea355965fa0ca24677c9ccd3e9b88.png)

   > **Note**
   >
   > All user-related management can be done from the **Administration** menu.

4. Click **Create User**.

   ![](https://docs.equinix.com/assets/images/NE-IAM-perms-create-user-f2c32e1d8ce905efe8f8df5c5723a905.png)

The following table summarizes user addition workflows:

| Workflow                                          | Description                                                                                                                                                                              | Next Action                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| ------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Email Invitation                                  | Send invitation to user email address                                                                                                                                                    | User receives email invitation. User needs to fill out user contact information, credential, PIN code and security questions. After user registration is completed, primary administrator needs to approve new user and then activation by enabling Customer Portal access and Network Edge permission.                                                                                                                                                                                                                                                                                                                 |
| Single or Multiple User Addition                  | Administrator to fill out user contact information including email address to initiate registration. Add up to 20 users at a time using the **Add User** form.                           | User receives assigned user name as well as temporary PIN and activation link in separate emails. User initiates account activation by creating password, PIN, and security questions. After user registration is completed, primary administrator needs to approve new user and then activate users by assigning Network Edge permission. If user does not receive activation email, initiate activation by enabling Customer Portal access and Network Edge permission described in following section. After enabling permission, initiate the **Create Password** process, which triggers a password creation email. |
| Batch Upload for Single or Multiple User Addition | Administrator to upload spreadsheet with user contact information including email address. Portal automatically fills out user information based on uploaded file to add multiple users. | User receives assigned user name as well as temporary PIN, and activation link in separate emails. User initiates account activation by creating password, PIN and security questions. After user registration is completed, primary administrator needs to approve new user and then activate user by enabling Customer Portal access and Network Edge permission.                                                                                                                                                                                                                                                     |

![](https://docs.equinix.com/assets/images/NE-IAM-batch-users-0957d26bcf6a81efad35ee7d987f233c.png)

## Add Users Using Identity and Access Management (IAM)[​](#add-users-using-identity-and-access-management-iam "Direct link to Add Users Using Identity and Access Management (IAM)")

IAM gives you a better understanding into your resource hierarchy. Manage your resources (virtual devices and connections) with organizationally defined boundaries. Administrators initiate the add user workflow in the [Identity and Access Management](https://portal.equinix.com/iam/accessmanagement/resources) portal.

1. Sign in to the [Identity and Access Management](https://portal.equinix.com/iam/accessmanagement/resources) portal.

2. From the **Resources** menu, click **Organization Hierarchy**.

3. Click the menu next to the organization or project to which you want to add a user.

   ![](https://docs.equinix.com/assets/images/NE-IAM-project%20menu-c3fef564f45deb138c594ced3d557d71.png)

4. Select **Add User**.

   ![](https://docs.equinix.com/assets/images/NE-IAM-add-user-983b76cd14acdf69d8db7e1a7a753b64.png)

5. Click **Continue**.

   ![](https://docs.equinix.com/assets/images/NE-IAM-continue-e937a98cd322d964c840d4706503305e.png)

To add multiple users, see [Add Multiple Users](#add-multiple-users).

For more information, see the [Identity and Access Management](https://docs.equinix.com/iam.md) documentation.

## Invite Users (IAM)[​](#invite-users-iam "Direct link to Invite Users (IAM)")

To invite a user:

1. Sign in to the [Identity and Access Management](https://portal.equinix.com/iam/accessmanagement/resources) portal.

2. From the **Resources** menu, click **Organization Hierarchy**.

3. Click the menu next to the organization or project to which you want to invite a user.

   ![](https://docs.equinix.com/assets/images/NE-IAM-project%20menu-c3fef564f45deb138c594ced3d557d71.png)

4. Select **Invite User**.

   ![](https://docs.equinix.com/assets/images/NE-IAM-invite-user-57b51feea7ea5aca011c316b26b0bdcd.png)

5. Click **Continue**.

   ![](https://docs.equinix.com/assets/images/NE-IAM-continue-e937a98cd322d964c840d4706503305e.png)

For more information, see the [Identity and Access Management](https://docs.equinix.com/iam.md) documentation.

## Assign Privileges and Permissions[​](#assign-privileges-and-permissions "Direct link to Assign Privileges and Permissions")

Only a primary administrator can assign primary administrator privileges to another user. To designate an existing user as a Primary Administrator:

1. Sign in and open the [Equinix Customer Portal: Fabric Dashboard](https://portal.equinix.com/fabric/dashboard).
2. From the **Administration** menu, select **User Management**.
3. Locate the existing user you want to designate as a primary administrator, and click the options menu.
4. Select **Manage Permission**.
5. Click the **Permissions** tab and select **Administration & IBX Access Services Request**.
6. Select **Administrator Privileges** and in the **Administrator type** section, make sure **Primary Administrator** is selected.

Go to **Administration** and select **User Management** to see the user role is now Primary Administrator.

![](https://docs.equinix.com/assets/images/NE-IAM-primary-admin-016d1deb9b48ba020dbc61c621b1a951.png)

## Grant Access to Network Edge[​](#grant-access-to-network-edge "Direct link to Grant Access to Network Edge")

To grant access to Network Edge to a user:

1. Sign in and open the [Equinix Customer Portal: Fabric Dashboard](https://portal.equinix.com/fabric/dashboard).

2. From the **Administration** menu, select **User Management**.

3. Locate the existing user you want to grant Network Edge access to and click the options menu.

4. Select **Manage Permissions**.

5. Click the **Permissions** tab and select **Equinix Fabric and Network Edge**.

6. Select **This user has Equinix Customer portal access** and **Include Network Edge Features**.

   ![](https://docs.equinix.com/assets/images/NE-IAM-grant-NE2-587eeb24e549bc1596fbded62cc6de28.png)

7. Click the **Network Edge** tab to configure more specific permissions to manage virtual devices.

   > **Note**
   >
   > When users are granted Network Edge access they can view all the devices and device configurations. Certain capabilities and functions are locked down depending on the privileges granted.

### Virtual Device Permissions[​](#virtual-device-permissions "Direct link to Virtual Device Permissions")

Virtual Device permissions apply to all virtual devices within an organization account. Permissions are NOT granted at an individual device level. The Select Virtual Device Permissions section allows the administrator to grant **Modify**, **Create**, and **Delete** privileges for virtual devices. **Create** and **Delete** permissions are for virtual devices. **Modify** is for attributes such as device name, version update, and licenses.

![](https://docs.equinix.com/assets/images/NE-IAM-vd-perms-1b09a3a091c7e181c4dd456a71b92f34.png)

### Device Configuration Permissions[​](#device-configuration-permissions "Direct link to Device Configuration Permissions")

Device Configuration permissions apply to all virtual devices within an organization account and enable control over remote access and internet bandwidth settings, as well as virtual device and network service connections.

![](https://docs.equinix.com/assets/images/NE-IAM-dev-con-1795932d4596c282a6fbca72f3467950.png)

| Permission Name              | Description                                                                                                                                                                                                                                                                                                |
| ---------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Remote Access Settings       | **Add**, **Remove**, and **Modify** SSH users, VPN connections, and Access Control List templates.                                                                                                                                                                                                         |
| Internet Bandwidth Settings  | **Create** and **Delete** permissions are not enabled for **Internet Bandwidth Settings** because 15Mbps of internet bandwidth is included with the original device order and can't be removed. **Modify**, when selected, allows the user to add additional internet bandwidth.                           |
| Virtual Device Connections   | **View**, **Create**, **Delete**, and **Modify** permissions for Layer 2 and 3 connections, Device Link (link between VNFs) and BGP settings.                                                                                                                                                              |
| Network Services Connections | **Create** allows the user to connect to a network service provider (NSP) offering its service on the Equinix Fabric platform through the dedicated interface on the device. **Create** also allows the user to order remote network ports to connect to an NSP that is not on the Equinix Fabric platform |

## Shared Asset Permission Management[​](#shared-asset-permission-management "Direct link to Shared Asset Permission Management")

Shared asset permissions allow Network Edge Customers to access devices and create connections across multiple customer organizations using a single login. Granting shared asset permissions requires two separate steps:

* The Administrator of the user's customer organization shares the user with another customer organization.
* The Administrator of the other customer organization provides port permissions to the shared user.

### Share the User[​](#share-the-user "Direct link to Share the User")

1. Sign in and open the [Equinix Customer Portal: Fabric Dashboard](https://portal.equinix.com/fabric/dashboard).

2. From the **Administration** menu, select **User Management**.

3. From the user list, locate the user you want to share and click **Options**.

4. Select **Manage Permission**.

5. Click **Share**.

   ![](https://docs.equinix.com/assets/images/NE-share-tab-d61e84b7e01d30869c27405552101ab4.png)

6. Click the check box associated with the customer organization you want to share your user with. You can expand the organization name to view the Account Number and Account Name.

7. Click **Submit Changes**.

8. In the **Stop/Start sharing user profile with selected organization(s)?** prompt, click **Submit**.

   ![](https://docs.equinix.com/assets/images/NE-share-stop-start-033273ea7669782128dfac2cc600e7fb.png)

Once the user has been shared, the **Shared User** icon displays next to the user in the user list. The Primary Administrator for the customer organization you shared the user with can now grant that user port permissions.

### Grant Permissions to the Shared User[​](#grant-permissions-to-the-shared-user "Direct link to Grant Permissions to the Shared User")

1. Sign in and open the [Equinix Customer Portal: Fabric Dashboard](https://portal.equinix.com/fabric/dashboard).

2. From the **Administration** menu, select **User Management**.

3. From the **Shared Users** menu, select **Include Users from other organizations**.

   ![](https://docs.equinix.com/assets/images/NE-share-include-users-28540371bde7f634cf76bcc42df4868e.png)

4. From the user list, locate the user you want to grant permissions and click **Options**.

5. Select **Manage Permission**.

6. Click the **Equinix Fabric and Network Edge** card.

7. In the **Select Port(s)** list, click the arrow associated with the IBX containing the ports you want the user to access.

8. Click the **View Ports and Virtual Resources** check box associated with the port(s) in the selected IBX if you want to grant these permissions.

9. Click the **Place connections and service orders** check box associated with the port(s) in the selected IBX if you want to grant these permissions.

   ![](https://docs.equinix.com/assets/images/NE-share-select-perms-18c001b138f90ddd9755425ca5724da0.png)

10. Click **Submit**.

> **Note**
>
> When you grant a shared user permissions to access your ports, the user inherits all the same permissions from their home customer organization. As the Administrator of the shared customer organization, you will be able to see the permissions of the shared user, but you will not be able to change them.

## Request Permissions[​](#request-permissions "Direct link to Request Permissions")

If you discover that you do not have the necessary permissions to complete an operation in Network Edge, request permissions from your administrator. Whenever you attempt to perform an action that you do not have the necessary permissions to perform, a Request Access prompt will display.

1. Click **Continue** in the **Request Access** box. The Equinix Customer Portal opens in a new tab and the Administrator(s) for your organization displays.

   ![](https://docs.equinix.com/assets/images/NE-request-access1-613326828eb9593e0a5f03fa9a003fc5.png)

2. Click **Add**. Your email client displays. Write an email indicating which permissions you want added.

3. Click **Send** to request your access.

## User Permissions Under IAM[​](#user-permissions-under-iam "Direct link to User Permissions Under IAM")

If your account is enabled for IAM, all the Network Edge device permissions are managed in the [Identity and Access Management](https://portal.equinix.com/iam/accessmanagement/resources) portal.

You do not need to change any settings under Fabric and Network Edge Permissions. You can start managing your virtual device and other resources with the IAM framework. For more information, see the [Identity and Access Management](https://docs.equinix.com/iam.md) documentation.

For information about IAM with Network Edge, see [Network Edge Identity and Access Management](https://docs.equinix.com/network-edge/iam/ne-iam.md).