MSP Controls to Restrict CyberSight Visibility for Client Admins
Minetta Gould
Summary
Allow MSP administrators to control whether CyberSight is visible to client-level administrators within sub-organizations.
Problem
CyberSight provides visibility into user activity and application usage. Some MSP partners allow their clients to administer DNSFilter within their sub-organizations but do not want those client admins to access company-wide analytics that could expose sensitive user activity (e.g., CEO/CFO browsing or application usage).
Currently, CyberSight data can only be controlled by enabling or disabling data collection for specific Roaming Clients. There is no option to hide the CyberSight dashboard or restrict access to its analytics for certain administrative roles.
Requested Capability
- Allow MSP administrators to hide or disable the CyberSight dashboard for client-level admins.
- Provide MSP-level controls to determine which roles can view CyberSight analytics.
- Maintain CyberSight data collection while restricting visibility when needed.
- Optionally support role-based permissions (custom roles) to control access to analytics features.
Customer Value
- Allows MSPs to provide dashboard access to clients without exposing sensitive user activity data.
- Supports privacy and internal policy requirements for organizations with executive or sensitive roles.
- Provides better role-based control for MSP-managed environments.