Admin Management

INKY's Admin List lets Super Admins control who can access and modify your INKY environment. Add admins individually by email or assign roles to entire groups.

Written By Matt Sywulak

Last updated 4 days ago

Found at: Admin Management - INKY

INKY's Admin List feature allows for easy admin management for your INKY team. As a Super Administrator, it allows for complete control and oversight of all of your INKY team admins.

Roles

Role	Access	Can Do
Viewer	Read-only	View all settings, no changes
Analyst	Basic	View settings, modify allowlist/blocklist
Policy Admin	Policy control	Modify policies, perform remediation
Super Admin	Full control	Everything above plus manage admins

Note: Only Super Admins can manage Admins. To request admin elevation, contact support@inky.com.

Add Admin by Email

Use this method for individual admins. The email address can be from any domain.

Navigate to Admin Center
In the left navigation menu, select Admin Management — Admin Management - INKY
On the Admin Management page, click Add New Admin
Enter the admin's email address
Select their role
Click Add

The user can log in immediately with their existing credentials.

Add Admins by Directory Groups

Using Domain and Directory API access, INKY can pull directory groups from M365 and Google Workspace and assign appropriate roles to their members.

Prerequisites

Enable Domain and Directory API Access first: API Access - INKY

Steps

Navigate to Admin Center
In the left navigation menu, select Admin Management — Admin Management - INKY
Select Admins by Active Directory groups (or Admins by Tenant groups for Google)
Click Add New Group
In the Tenant Group dropdown, select your group
Select a Primary role for the group members
Click Add

Key behavior: If a user belongs to multiple groups with different roles, they receive the highest-level permissions.

Custom Groups

If your group doesn't appear in the Tenant Group dropdown, select Custom Group and manually enter the IDs:

Tenant ID — Unique identifier for your tenant
- For M365: Your EntraID tenant ID (found in EntraID → Entra ID → Overview).
- For Google: Your INKY team ID.
Group ID — The unique identifier of the group from your directory.
- For M365: Found in EntraId Portal → Groups → select your group → Object ID.
- For Google: Found in Google Admin Console → Groups → select your group → Group ID.

Admin by KaseyaOne Role

The Admin by KaseyaOne Role tab in Settings > Admin Management provides a read-only view of role mappings between KaseyaOne and INKY. Users who have roles assigned in KaseyaOne are automatically mapped to the corresponding INKY admin roles.

This tab is for viewing only. You cannot add or remove admins here—role assignments are managed in KaseyaOne.

Organization-Level Groups

For MSPs managing multiple teams, you can assign groups at the organization level to grant access across all child teams.

Organizations are denoted with the Skyscraper icon in the team selector. When you have an organization selected, group assignments affect all child teams—including which users can manage each child team.

Groups available at the organization level are inherited from the base team used to create the organization. This allows MSPs to assign directory groups to specific INKY roles, giving members access at the appropriate level to all child teams.

How to identify your view:

Base team view — No skyscraper icon next to the team name. You'll see all settings options.
Organization view — Skyscraper icon visible next to the team name. Fewer settings options, but group assignments here apply to all child teams.

If you don't have a Microsoft or Google account, please open a ticket with support@inky.com for assistance.