MSP Onboarding

Manage all your clients' security posture from one dashboard.

How MSP mode works

PosturIQ's MSP mode lets you manage multiple client tenants under a single organization. You get:

Single dashboard showing all clients' scores at a glance

Weekly MSP digest email with cross-client trends

Per-client drill-down with full scan details

Consolidated device check management across all clients

Client-branded reports you can share with customers

1

Set up your MSP organization

Sign up at app.posturiq.com and either purchase the MSP plan from the pricing page, or contact us at hello@posturiq.com to start an MSP trial.

Once MSP mode is enabled, you'll see the multi-tenant client dashboard instead of the single-tenant view.

2

Add client tenants

From your MSP dashboard, click Add Client. For each client you need:

  1. A Global Administrator from the client's tenant to grant admin consent
  2. The Exchange Administrator role assigned to PosturIQ in the client's tenant (for email checks)

The consent flow is the same as the Quick Start steps 2-4 - but performed in each client's tenant. Send the consent link to the client's IT admin, or walk them through it during onboarding.

3

Deploy device checks to clients

Each client gets their own device report token. From the MSP client list, open the ... menu on a client row:

  1. Click Generate device check token
  2. Click Copy device check link to get the shareable URL
  3. Send the link to the client's employees, or use it with your RMM tool

The link opens a page where employees can download pre-configured scripts for Windows or macOS - no PosturIQ login needed. Results are automatically linked to the correct client org on your dashboard.

For bulk deployment via RMM, see the Device Check Deployment guide.

4

Monitor and report

Your MSP dashboard shows all clients with their current scores. Use it to:

  • Identify which clients have the most critical findings
  • Track score improvements over time
  • Generate reports for client security reviews
  • Prioritize remediation work across your client base

You'll receive a weekly MSP digest email summarizing all clients' scores, new findings, and any regressions.

Team access

PosturIQ uses a role-based system with owner approval:

How team members join

When a new user signs in from your M365 tenant, they land in a pending state. The organization owner sees a notification in Settings and can approve them as a member.

Roles

Owner

Full access - everything a member can do, plus:

  • Add and remove client tenants
  • Manage settings, billing, and branding
  • Approve or deny pending users
Member

Day-to-day operations access:

  • View client list and drill into dashboards
  • Run manual scans per client
  • Generate and rotate device check tokens
  • Download PDF reports and CSV exports
  • Configure per-client email report settings
Pending

No access until approved by an owner

Client organization accounts

Users from a client's M365 tenant can also sign in and see their own organization's dashboard. They go through the same approval flow - the MSP owner can approve them from Settings. Approved client users only see their own org's data, not other clients.

Pricing for MSPs

The MSP plan is a flat rate that includes up to 25 client tenants. Additional tenants are billed at a per-tenant rate. Billing adjusts automatically as you add or remove clients - no manual reconciliation needed.

See our pricing page for current rates and a 30-day free trial.