Overview

The Xyte platform offers a number of authorization methods via a complex, multi-account setup. The base entities are Partners (OEMs), End Customers (organizations signing up to manage devices), Users and Groups.

All Users for a given organization are part of a single "Cloud" and cannot login to a different cloud. (The exception are Support Users external to the organization, who may connect to any End Customer in any Partner Cloud).

Example

A user "[email protected]" registers on https://cloud.techworks.com and claims some devices. If the same user attempts to sign in to a cloud that belongs to another Partner, they will not be able to access that cloud.

Terminology

Partner - Any OEM, Channel Partner, etc registered on the Xyte Platform
Partner Portal - The portal through which Partners manage their device models, supported customers, ecommerce offerings and more.
Customer Portal - The portal through which End Customers manage their devices.
Partner Cloud - White-labeled portal, through which the Partner's End Customers manage their devices.
End Customer - Any organization that registers through a Partner Cloud for the purposes of monitoring and managing their devices and/or managing their hardware/device/equipment subscriptions.
Partner User - A user registered in a Partner Portal
End User - A user registered in a Customer Portal for a single Partner.
Support User - An external user who holds a support seat and may support multiple End Customers.
Group - A group of users registered in a Customer Portal for a single Partner.

Partner Cloud

Each Partner receives their own private cloud, through which all End Customers, Users and Groups are managed. Each User and Group belongs to one single End Customer.

In this example, we have an OEM named "MachinePro". The cloud for this OEM has two End Customers "Acme Org" and "Nexus Org" with the first having two Users and a Group and the second a single User.

The Partner Cloud is not limited on the number of End Customers who can sign-up (or be invited) and each End Customer has an unlimited number of Users and Groups they can create.

Sing-in and sign-up to the Partner Cloud is done via the Partner's custom URL (which defaults to partner-name.on-xyte.com but can be changed to a custom domain).

Partners Cloud

All OEMs are by themselves part of the main Xyte Cloud. These Uses can access the Partner's portal, allowing them to manage devices, models, store and many other aspects of the Partner's portal.

In this example there are two Partners on the platform, each with their own Users and Groups.

The Partner Portal Overview can be accessed via: https://partners.xyte.io.

Lab Accounts and Access

Each Partner Cloud comes automatically with a single End Customer marked as "Lab" (which functions like a sandbox). Lab customers have some special functionality, including:

Ability to claim un-published models for testing
Purchase non-published products
Use a lab payment method to test purchase flows

In this example there are 3 clouds, the "Xyte Partner Cloud" and two Partners named "TechWorks" and "MachinePro". The user U1 has access to the "TechWorks" partner portal but also has access to the "TechWorks Lab" End Customer. To access that Lab, the user must sign-in on https://app.xyte.io.

Multiple Lab Accounts

Multiple lab accounts are supported by the platform and can be created upon request. This feature can be used to separate the work done by developers, sales, marketing, etc teams.

Any Partner User who is a member of the Administrators Group can automatically switch to any Lab account in their Cloud.

> In this example the user U3 is part of the "MachinePro" partner's Administrators group and thus has access to both "MachinePro"'s labs.

Accessing Labs

There are two main methods to access the Lab accounts:

Sign-in at https://app.xyte.io
Visit the list of End Customers in the Parther Portal at https://partners.xyte.io/customers and click "Visit Portal"

Switching between Labs (or any End Customers)

For Users with access to multiple End Customers, either Labs (by being Partner Administrator) or through Support Seats, can access the list of accessible End Customers by going to the End Customer portal (https://app.xyte.io) and clicking the top-left menu -> Switch Tenant.

Support Seats

When enabled, End Customers can open Tickets directly to the manufacturer of their devices. These tickets allow two way communication between the Partner's support team and the End Customer and allow the support team to diagnose and remotely operate the device.

Only users of the Partner Portal who have a Support Seat assigned can access the Tickets area in the Partner's portal (under Support->Tickets).

Accessing End Customer's portals

End Customers can choose to invite users from the Partner's Portal to access their cloud (for remote support, etc). The invitation is based on the Partner Portal User's email and these users can be granted full administrative access to the whole End Customer Portal or for a sub-set of their organizational tree.

In this example, the user U2 has a Support Seat assigned and were granted access to three different End Customers belonging to two different Partner Clouds.

Assign access

There are two methods for Support Users to gain access to an End Customer

When an End Customer is created from the Customers view by a Support User, the Support User can choose if End User should be granted administrator-evel access.
From the Customer portal, administrators can invite Support Users to be part of their Groups (e.g. Administrators) or grant them direct access on a space level.