--- title: MSP Portal description: Run CMMC compliance across many client organizations from one place — manage and onboard clients, watch every client's readiness at a glance, reuse shared templates, and put your own brand on the platform. navigation: icon: i-lucide-building-2 --- # MSP Portal The **MSP Portal** is the home base for **Managed Service Providers** — partners who run CMMC compliance on behalf of many client organizations. Instead of logging into each client separately, you manage your whole book of business from one account: a **list of client organizations** you onboard and oversee, a **cross-client overview** that surfaces every client's readiness side by side, **shared templates** you build once and reuse everywhere, and **white-label branding** that puts your logo and company name on the platform for you and your managed clients. Your MSP account is its own organization on the platform. The clients you manage are separate organizations linked to you, each with its own systems, assessments, evidence, and users — you simply have the reach to work across all of them. ::note Find it in the sidebar under **MSP** (`/dashboard/msp`). The portal is available only to MSP accounts; the areas inside it are governed by your MSP role — see [Permissions](#permissions). :: --- ## Key concepts ### What an MSP is on the platform An **MSP** is a partner organization that manages compliance for other organizations. Each organization you manage is a **managed client** — a full, self-contained tenant linked to your MSP account. You get a portfolio view across all of them, while each client's data stays isolated to that client. | Term | Meaning | | --- | --- | | **MSP account** | Your partner organization — the parent of everything in the portal | | **Managed client** | A client organization you onboard and oversee | | **Portfolio** | The full set of clients under your MSP account | ### MSP roles Two roles run the portal. Both can do the day-to-day compliance work across managed clients; they differ in who controls the **account itself** — billing, branding, and org administration. | Role | What it can do | | --- | --- | | :badge[MSP Super Admin]{color="info"} | Everything an MSP Admin can, **plus** MSP billing, white-label branding, inviting users, and managing the MSP organization | | :badge[MSP Admin]{color="neutral"} | Full compliance work across managed clients and shared templates — **but not** billing, branding, user invites, or org settings | ::note Think of **MSP Super Admin** as the account owner and **MSP Admin** as a compliance operator. Both manage clients and templates; only the Super Admin controls the money and the brand. :: ### MSP plan MSP partners subscribe to a **dedicated MSP plan**, separate from the direct-customer plans. It's built for managing many clients from one account, and **white-label branding is included** at no extra cost. Without an active MSP subscription, an account keeps basic client management and the cross-client overview, but the premium features — white-label branding and shared templates — stay locked until you subscribe. | Feature | Active MSP plan | Without a plan | | --- | --- | --- | | Client management & onboarding | :badge[Included]{color="success"} | :badge[Included]{color="success"} | | Cross-client compliance overview | :badge[Included]{color="success"} | :badge[Included]{color="success"} | | Shared templates | :badge[Included]{color="success"} | :badge[Locked]{color="neutral"} | | White-label branding | :badge[Included]{color="success"} | :badge[Locked]{color="neutral"} | --- ## Using the portal The MSP Portal opens on a **dashboard** that summarizes your portfolio — how many clients you manage and your subscription status — with quick links into each area: **Clients**, **Compliance**, **Templates**, **White Label**, and **Billing**. ### Onboard a client ::steps{level="4"} #### Open the clients area From the sidebar, go to **MSP → Clients** (`/dashboard/msp/clients`) to see the organizations you already manage. #### Create the client organization Start a new client and enter its details. The platform provisions it as a fresh, isolated organization linked to your MSP account. #### Invite the client's team Add the people who'll work in that organization so they can log in and pick up their own compliance tasks. #### Start managing The new client appears in your list and rolls up into your cross-client overview alongside the rest of your portfolio. :: ::tip Every managed client is a complete organization in its own right — it has its own systems, assessments, evidence, and users. Onboarding a client doesn't merge their data into yours; it links a separate tenant you're now able to work in. :: ### Watch every client's readiness The **Compliance** area (`/dashboard/msp/compliance`) is your cross-client overview — one table with a row per managed client so you can spot who's on track and who needs attention without opening each org. ::steps{level="4"} #### Open the compliance overview Go to **MSP → Compliance** to see all your clients in one place. #### Scan the portfolio Each row shows that client's key readiness signals at a glance — their **SPRS score**, how far along their **readiness** is, and where their **gaps** are. #### Drill into a client Expand a client to see more detail on its open gaps, then jump into that organization to do the work. :: ::note The overview reads each client's live compliance data, so the numbers always reflect the client's current state — no manual roll-up or refresh needed. :: ### Reuse shared templates Templates let you build compliance content **once** and apply it across clients, so you're not rebuilding the same evidence expectations and policy groundwork for every organization. ::steps{level="4"} #### Build a template In **MSP → Templates** (`/dashboard/msp/templates`), assemble reusable content — organized by CMMC control family — that captures what "good" looks like for a given objective. #### Import it to a client Apply the template to one of your managed clients to seed that client's workspace with the shared content. #### Track what you've applied An **import history** records which templates went to which clients, so you can see your rollout at a glance. :: ::note Shared templates are a premium MSP feature. If your account doesn't have an active MSP plan, the templates area is visible but building and importing are locked until you subscribe. :: ### Put your brand on the platform White-label branding replaces DIBFI branding with your own, for both your MSP account and the clients you manage. ::steps{level="4"} #### Open white label Go to **MSP → White Label** (`/dashboard/msp/white-label`). This area is available to **MSP Super Admins** on an active MSP plan. #### Upload your logo Add your company logo. It replaces the DIBFI logo in the header and on sign-in for you and your managed clients. #### Set your company name Enter your company name so it appears throughout the interface in place of DIBFI. :: ::note A custom **subdomain** (for example, `yourfirm.dibfi.com`) is **coming soon** — the option is visible but not yet available. A small "Powered by DIBFI" credit remains in the footer. :: ### Manage MSP billing The **Billing** area (`/dashboard/msp/billing`) is where **MSP Super Admins** manage the MSP subscription and see billing across managed clients in one place. It's separate from the billing page a direct customer sees. --- ## Permissions Access inside the portal is governed by MSP-specific permissions in the role matrix. Both MSP roles can do compliance work across managed clients; the account-level controls are reserved for the Super Admin. | Capability | MSP Super Admin | MSP Admin | | --- | --- | --- | | Manage & onboard clients | :badge[Yes]{color="success"} | :badge[Yes]{color="success"} | | Cross-client compliance overview | :badge[Yes]{color="success"} | :badge[Yes]{color="success"} | | Build & import shared templates | :badge[Yes]{color="success"} | :badge[Yes]{color="success"} | | Compliance work in managed clients | :badge[Yes]{color="success"} | :badge[Yes]{color="success"} | | White-label branding | :badge[Yes]{color="success"} | :badge[No]{color="neutral"} | | MSP billing | :badge[Yes]{color="success"} | :badge[No]{color="neutral"} | | Invite users & manage the MSP org | :badge[Yes]{color="success"} | :badge[No]{color="neutral"} | ::warning Branding, billing, user invitations, and organization settings are reserved for the **MSP Super Admin**. An **MSP Admin** is a full compliance operator across your clients but cannot change the account's plan or brand. :: --- ## How it works Extra detail on how the portal behaves — product behavior, not internals. ### Client isolation Every managed client is a **separate organization** with its own systems, assessments, evidence, users, and settings. Your MSP account is linked to each client so you can work across the portfolio, but a client's data never mixes with another client's or with your own MSP tenant. What you gain as an MSP is **reach**, not a merged dataset. ### The cross-client overview The compliance overview reads each managed client's **live** compliance state, so a client's **SPRS score**, **readiness** progress, and **open gaps** always reflect the latest work in that organization. There's nothing to sync — improve a client's posture and their row updates on its own. ### What white-label branding changes When branding is configured, your **logo** replaces the DIBFI logo in the header and on the sign-in screen, and your **company name** appears through the interface — for your MSP account and for every client you manage. A small "Powered by DIBFI" credit stays in the footer, and the custom-subdomain option is reserved for a future release. ### Plan-gated features Basic client management and the cross-client overview are always available to an MSP account. The premium features — **shared templates** and **white-label branding** — require an **active MSP plan**. If a plan is canceled but its paid period hasn't ended yet, those features stay available until the period runs out; after that they lock, while your clients and their data remain intact. --- ## Related features :::card-group ::card{title="Billing & Subscriptions" icon="i-lucide-credit-card" to="https://app.dibfi.com/dashboard/billing"} How plans, usage limits, and invoices work — including the dedicated MSP plan. :: ::card{title="Assessments" icon="i-lucide-clipboard-check" to="https://app.dibfi.com/dashboard/assessments"} The CMMC workflow each managed client runs toward certification. :: ::card{title="Document Library" icon="i-lucide-file-text" to="https://app.dibfi.com/dashboard/policy-templates"} Generate and publish the policies your templates help standardize. :: :::