New Tenant Admins to Replace SP Admins

We’re excited to announce that the Cirrus Console now has a notion of a “Tenant Admin” to complement the tenant-oriented views in the console! This new permission will replace “SP Admins”, which are now considered deprecated and will eventually be removed.

Why Are SP Admins Being Deprecated?

As we move toward “tenants” as the focus of Cirrus administration, ensuring our customers remain in charge of what level of access is delegated to various administrators as product capabilities advance is our primary goal.

What’s The Difference Between “SP Admin” and “Tenant Admin”?

An “SP Admin” could manage discovery for a proxy, but couldn’t see tenant views or manage any other configuration. Tenant Admins can now help with integrating applications, authentication providers, and can still configure the discovery UI. This is not an access level available to legacy SPs.

How Do I Migrate?

1. Head to Organization -> Admins in the Cirrus Console.
2. Delete any admins who have departed their role.
3. Ensure that any remaining admins (who are not org admins) are assigned specific tenant access as appropriate.

Who Doesn't Need To Migrate Yet

• Customers of the legacy “invitation service” who have assigned “SP Admin” in order to delegate invitation management do not need to change those permissions at this time.
• Customers with direct legacy Gateway “SP” integrations cannot yet migrate them, unless the legacy SP(s) is first converted to an app integration with a Cirrus Proxy tenant.

How Can I Get Support?

Our Customer Success team is ready to help you if you encounter any issues during this migration. You can always reach them at support@cirrusidentity.com.