Offboarding
Deletion or Isolation of Managed Companies
Offboarding Individual Users
A single user or group of users can be removed from the platform by deleting the users within the managed company's admin panel.
In the Managed Companies screen, click the Launch icon to enter the Admin Console of the MC containing the user to be deleted.
2. Navigate to the admin panel and click the Edit icon next to the user you wish to delete. From the User Actions menu, select Delete User. Once a user is deleted, beginning the following day that user will not be counted toward the MC's daily license count.
The user's vault will be deleted along with their account. If the user wishes to retain their records and vault data, they must be exported prior to account deletion. Personal vaults and Family Plan vaults are not affected.
Deletion of Managed Companies, Users and All Data
Use the following procedure to delete all user vaults, data and the managed company:
In the Administration Console of the MC to be deleted, click the Launch icon.
Navigate to the admin panel and delete all users. You can select all users at once via the "User Checkbox" as seen below.
Close out of the MC's Administration Console and return to MSP Console.
Delete the MC from with the Managed Companies screen.
Isolation of Managed Company
Use the following procedure to isolate a managed company into a standalone trial instance. Instance structure and vaults are retained. This assumes the client wants to continue using the product as a Keeper customer outside of the MSP context.
At least one user must be assigned to the MC's Keeper Administrator role prior to MC deletion. Failure to do so will result in permanent Administration Console lockout
Click the Launch icon for the Administration Console of the MC to be isolated.
Navigate to the Admin Panel > Roles and insure at least one, preferably two active user belong to the Keeper Administrator role. Failure to do so will result in permanent Administration Console lockout. The first user added to admin role will become the principal admin and owner of the instance.
Close out any open MC's Administration Consoles and return to the MSP Console.
In the Managed Companies tab, select the MC and click Remove Company.
Migration of Managed Company to Another MSP
Keeper allows for the migration of a managed company to a different Managed Service Provider (MSP).
To complete the migration, their current MSP must first assign at least one user from the managed company to the Keeper Administrator role within the managed company’s Keeper Admin Console. After assigning a designated user the Keeper Administrator role, the managed company’s instance must then be removed from the previous MSP’s instance.
Once removed, the managed company will automatically be transitioned to an Enterprise Trial account for a period of 14 days. This process ensures a secure and efficient transition while maintaining administrative oversight.
For the now Enterprise trial account, users utilizing SSO must be switched to Master Password users and must be removed from the SSO node, if applicable. Before this step, users need to set a recovery phrase to ensure continued access to their accounts. Users can set a recovery phrase by following the steps listed below:
From the User menu in the user's vault, click Settings > Select Recovery Phrase
Once the users are removed from the SSO node, they will need to log into their account using the Forgot Master Password workflow by following the steps below:
From the Keeper vault login screen, click Need Help? > Forgot Master Password. Follow the prompts to regain access.
Next, ensure that all shared folders within the enterprise have at least one user’s email address showing in the shared folder’s user tab, and the user has full folder permissions (Can Manage Users & Records).
The administrator of the Enterprise trial instance will need to contact Keeper Support to be verified. The enterprise trial can then be downgraded. Downgrading an Enterprise trial will switch all users to free personal trial accounts for 30 days and remove the users from the Enterprise trial instance. No Data Will Be Lost During The Downgrade.
The users will now be in the state to be onboarded to the new managed company in the new managed service provider. The new managed service provider will need to recreate roles and teams, that are not able to be migrated.
Last updated