For the complete documentation index, see llms.txt. This page is also available as Markdown.

Enterprise to MSP

Transfer a standalone Enterprise to an MSP as a Managed Company.

Overview

Use Keeper Commander CLI to transfer a standalone Keeper Enterprise tenant to an MSP as a Managed Company (MC).

Scenario: The Enterprise starts the transfer. The Receiving MSP accepts it. Keeper Security reviews it. The Enterprise completes it.

Command reference: Commander CLI and SDK

Terminology

Term
Definition

MSP

Managed Service Provider — a Keeper Security tenant that manages other companies

MC

Managed Company — a Keeper Security tenant managed by an MSP

Enterprise

A standalone Keeper Security tenant (not currently managed by any MSP)

Receiving MSP

The MSP that will take ownership of the Enterprise as an MC

Example Accounts Used in This Guide

Replace these examples with the administrator names and email addresses in your environment.

Role
Admin Name
Admin Email

Enterprise Admin

enterprise-admin

enterprise-admin@example.com

Receiving MSP Admin

receiving-msp-admin

receiving-msp-admin@example.com

Prerequisites

  • Keeper Commander CLI is installed and configured.

  • You are the Principal Admin for the Enterprise or Receiving MSP.

  • You have the Receiving MSP administrator's name and email address.

Step 1 — Enterprise: Initiate the Transfer

The standalone Enterprise admin logs in to Commander and sends a request to join the MSP.

1. Log in to Commander as the Enterprise admin:

2. Initiate the transfer request:

3. Verify the transfer request was sent:

The status should show the request is pending acceptance by the Receiving MSP.

Step 2 — Receiving MSP: Accept the Transfer

The Receiving MSP admin logs in and accepts the inbound request from the Enterprise.

1. Log in to Commander as the Receiving MSP admin:

2. Check the incoming transfer request:

3. Accept the transfer:

4. Confirm acceptance:

The status should now reflect that the transfer is accepted and pending legal approval.

After both parties agree, Keeper emails the Enterprise and Receiving MSP administrators.

  • Provide any information Keeper requests.

  • Keeper approves or denies the transfer.

  • Keeper emails both parties with its decision.

No action is required in Commander during this step. Wait for legal approval before proceeding.

Step 4 — Enterprise: Complete the Transfer

After Keeper approves the transfer, the Enterprise administrator completes it in Commander.

1. Log in to Commander as the Enterprise admin:

2. Confirm legal approval status:

3. Perform the transfer:

The Enterprise is now a Managed Company under the Receiving MSP.

How to Cancel a Transfer

The Enterprise cannot cancel a submitted request. Only the Receiving MSP can cancel the transfer.

To cancel, the Receiving MSP admin must:

1. Log in to Commander as the Receiving MSP admin:

2. Cancel the transfer:

Cancel the transfer before Keeper approves it. This command cannot reverse a completed transfer.

Command Reference Summary

Step
Who Runs It
Command

Initiate transfer

Enterprise

mc-transfer join-msp --target-name "<msp-admin>" --target-email <msp-email>

Check status

Either party

mc-transfer status --target-name "<other-admin>" --target-email <other-email>

Accept transfer

Receiving MSP

mc-transfer accept-mc --target-name "<enterprise-admin>" --target-email <enterprise-email>

Complete transfer

Enterprise

mc-transfer perform --target-name "<msp-admin>" --target-email <msp-email>

Cancel transfer

Receiving MSP only

mc-transfer cancel --target-name "<enterprise-admin>" --target-email <enterprise-email>

Last updated