Revoked MSP technician still has portal accessSolved

Participant
Discussion
4 months ago Apr 16, 2026

I’m managing client portals from the Hexnode MSP console and ran into a confusing access issue.

One client portal is on the Enterprise plan, so we expected only the assigned technician/user to have access. I removed my own access to that client portal and left only the client user assigned. But I could still open the portal.

The portal-specific scope looked correct from the MSP console, and I couldn’t find any extra users assigned to that portal. Why would a revoked technician still be able to access the portal?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
4 months ago Apr 16, 2026
Marked SolutionPending Review

Hi @jayceon,

In an MSP setup, check whether any technician has the scope set to Global.

A technician with Global scope can access all UEM portals under the MSP portal, even if that technician is not explicitly assigned to a specific client portal through portal-specific scope.

For portals on plans with a technician limit, such as a Enterprise plan with a three-technician cap, Global-scoped technicians can still count as active technicians for that portal. If the available technician slots are already occupied, a newly assigned portal-specific technician may be unable to access the portal.

Recommended checks:

  1. Open the MSP console.
  2. Go to the technician/user scope settings.
  3. Review all technicians with Global scope.
  4. Remove Global scope from users who should not access every UEM portal.
  5. Remove and reassign the portal-specific scope for the intended client user.
  6. Ask the client user to try accessing the portal again.

If the old technician loses access after Global scope is removed, that confirms the previous access was coming from the MSP-level Global scope rather than the portal-specific assignment.

Regards,
Sienna Carter
Hexnode UEM

Save