Give Virtisphere access to your devices

You keep ownership of every account, and we work through named access that you grant and can remove at any time. This page shows how to do that in each tool.

The rules we work to

• The accounts are yours. Apple Business, Microsoft 365 and ManageEngine are created in your company’s name. If we ever stop working together, nothing has to be handed back.
• Named access, never a shared login. We never ask for your administrator password, and anything done under our account was done by us.
• The narrowest role that does the job. Device work does not need the power to change your people or your billing.
• You can remove us in minutes. Each section below says how.

Apple Business

1. Sign in to Apple Business and go to People, then Users, and select Add.
2. Create an account for Virtisphere on your domain, for example virtisphere@yourcompany.com.
3. Give it the IT Administrator role, or Device Enrollment Manager if we are only handling devices.
4. Use Share Sign-in Instructions to send us the details.

To remove our access, deactivate or delete that account.

Microsoft Intune

There are two ways to do this. The first is quicker to set up; the second is tidier once it is in place.

A named account in your Microsoft 365

1. In the Microsoft 365 admin center, create a user for Virtisphere, for example virtisphere@yourcompany.com.
2. Assign it the Intune Administrator role.
3. Require multifactor sign-in for it, as for any administrator.

Administrators do not need a paid licence to sign in to the Intune admin center; that is on by default for Microsoft 365 accounts created since July 2021. To remove our access, block sign-in for the user or delete it.

A delegated relationship through Microsoft’s partner program

Microsoft partners can request access to your account without having a user inside it. The request names exactly the roles needed and how long they last, you accept it through a link in an email, and you can end it at any time. A relationship lasts up to two years and can renew automatically.

Accepting a request needs a Global Administrator, or a Customer Delegated Admin Relationship Administrator, on your side.

ManageEngine

1. In the console, go to Admin, then User Administration.
2. Add a user for Virtisphere with the Technician role, or a custom role with only the permissions the work needs.

To remove our access, delete that user.