Once you've built your first Report, it's time to bring your team into Strategy Overview. Adding users, assigning roles, and configuring permissions ensures the right people have access to the right clients and tools.
If you're a solo vCIO, you can skip this article for now and come back when you're ready to add team members or set up client portal access.
Adding users
Go to Settings > Users
Click Add User
Fill in the required fields: email, first name, last name
Set their default template: the "Strategy Overview" template works for most users
Choose their role (see below)
Configure their group access and company permissions
Select which modules they should see
Click Add User
The system will send an invitation email to the new user. If they don't receive it, you can resend it from the Users page by selecting their checkbox and clicking Resend Invitation Email.
Choosing the right role
Each role has different permissions. Here's how to think about who gets what:
Administrator can edit all users and all settings. Best for MSP owners and executives who need full control.
Manager can edit all users and settings except admin-level changes. Best for senior vCIOs and team leaders.
Editor can edit Reports and their own settings but can't manage other users. Best for vCIOs and project engineers who fill out Assessments and build Reports.
Read Only can view Reports but not edit them. Best for engineers or team members who need visibility but don't manage client strategy.
External Editor is designed for client-facing users, like a client's IT director or primary contact. External users don't see helper videos, don't receive Strategy Overview emails, and don't see the support chat. This role is used when you set up Strategy Overview as a client portal.
Tip: We recommend creating a test external user so you can preview the client experience before inviting real clients.
Setting up permissions
For roles other than Administrator, you can control access at a more granular level:
Groups organize your clients into segments, by territory, by vCIO, by account manager, or however makes sense for your MSP. When you assign a user to a group, they only see the companies in that group. You can manage groups at Settings > General > Groups. It's fine to start with just one group and add more as your team grows.
Company access gives you two options: allow access to all companies from selected groups (the user sees everything in their groups, including new additions), or select specific companies manually. Note that adding someone to a group alone doesn't automatically grant access to all companies in that group. The "Allow access to all companies from selected groups" checkbox must be enabled, or you need to select specific companies. For internal team members, "allow all from selected groups" is usually the right call. For external client users, select specific companies.
Templates: choose which templates the user can see. The preloaded "Strategy Overview" template covers most use cases.
Modules: select which modules appear in the user's left navigation. For internal vCIO users, you'll typically enable all available modules, including Strategy, Plan, Technology, Office 365, Stack, Companies, Schedule, and Tickets. For external client users, you will want to choose their available modules carefully. If you don't select any modules, the user will only see their profile page.
Assigning a vCIO to a company
You can assign a primary vCIO or user to each company. This helps track who owns each client relationship and shows up in reporting. To assign a user to a company, open the company in the Companies Module and update the assigned user field.
Common team setups
Here are a few typical setups to give you a starting point:
Solo vCIO or small MSP (1-2 people doing strategy): Create one group with all your clients. Give yourself Administrator access. If you have a second person, make them an Editor. You probably don't need complex permissions yet.
Growing vCIO team (3+ people): Create groups by territory or by vCIO assignment. Give each vCIO Editor access to their group. Give your vCIO team lead Manager access across all groups so they can review and coach.
Client portal users: Create External Editor accounts for client contacts who need to view their Reports. Assign them to specific companies only, not groups. Limit their modules to Strategy and Plan. See the Going Deeper collection for the full client portal setup guide.
