Creating a Workgroup

Prerequisites

You have logged in to the Huawei Qiankun console and have one of the permissions of the following roles:

Preset role: MSP administrator permission
Custom role: permission to manage workgroups and managed objects under the user and tenant service

Context

The first registered MSP account is the root workgroup administrator, acting the role of a tenant administrator with all operation permissions.

The root workgroup administrator can create lower-level workgroups. A maximum of five levels of workgroups are supported, and each workgroup has an administrator.

Procedure

Click your account in the upper right corner, and choose Permission Management > User Management. The User Management page is displayed.
In the workgroup navigation tree, click + to create a workgroup.

Configure basic workgroup information and administrator information, and click Next. For details about the parameters, see Table 1.

The value of Max. Users or Max. Workgroups cannot exceed the number of remaining users or workgroups supported by the root workgroup.
To view information about the root workgroup, click next to Default Workgroup.

Figure 1 Configuring workgroup information

**Table 1** Parameters for configuring a workgroup administrator
Parameter	Description
Authentication Mode	Administrator authentication mode, which can be set to Password or SMS.
Password	Password of the administrator. Set a password that complies with password requirements.
Phone Number, Email Address	Phone number or email address for receiving notifications and reports from Huawei Qiankun.
Enable User	Whether to enable the workgroup administrator. The workgroup administrator is enabled by default, indicating that this user is online and can perform operations allowed by its authorized permissions.

Specify roles for the workgroup administrator, and click Next.
- By default, the role list displays all roles of the current login account.
- In this example, the default roles of a tenant are displayed. If you have created a custom role by referring to Creating a Role, the role is also displayed in the role list.
Figure 2 Specifying administrator roles
Configure managed resources for the workgroup, and click Finish.
- Shared Resources: refers to self-created tenants, which can be managed by multiple workgroups at the same level.
- Exclusive Resources: refer to managed tenants, which can be managed by only one workgroup at the same level.
Managed tenants or self-created tenants can be managed by users in a workgroup only after being allocated to the workgroup.

Figure 3 Configuring a managed object

Follow-up Procedure

Change the initial password. When logging in to the Huawei Qiankun console for the first time, the new workgroup administrator needs to sign website agreements and change the password.

View, modify, or delete a workgroup. The root workgroup can only be viewed.

**Table 2** Operations that can be performed on workgroups
Operation	Description
View	Select a workgroup in the Workgroups navigation tree, and click above the user list to view the workgroup information, administrator information, and managed objects.
Modify	Select a workgroup in the Workgroups navigation tree, and click above the user list to modify the workgroup information, such as the workgroup name, maximum number of users, and managed objects.
Delete	Deleting a single user: Select a user and click in the Operation column. Deleting users in batches: Select multiple users and click Delete above the user list to delete the users. CAUTION: To delete a workgroup with lower-level groups, delete its lower-level workgroups first. A workgroup with lower-level workgroups cannot be deleted. When a workgroup is deleted, all data and user information of the workgroup will also be deleted and cannot be restored, and online users in the workgroup will be logged out. Exercise caution when performing this operation.