Skip to content

Cloud Access Manager Account Ownership

Cloud Access Manager accounts have a single account owner, and one or more administrators who have the ability to authenticate to the Cloud Access Manager Admin Console and manage Cloud Access Manager deployments and services. The account owner is any user who is able to sign in with a supported identity provider and provide a PCoIP registration code. The following are some important points around the Cloud Access Manager account owner:

  • If the account owner password is lost it can only be recovered through the identity provider. Teradici does not store any of the passwords. It is the customer's responsibility to maintain access to their account owner's password and if necessary securely store the account information.
  • As the account owner account is provided by an identity provider such as Google or Microsoft, Teradici does not have the ability to recover account owner's account and is unable to transfer data to a new account if there is no access to the old account.
  • Teradici can transfer a Cloud Access Manager account to another account owner provided the old and new owner accounts are accessible by the system administrator. In order to perform an account transfer see below.
  • Both Microsoft and Google support transferring accounts from one organization to another. The process for doing this differs between the providers and in order to initiate this account transfer the user must work with the indentity provider in question. Once the account has been transferred through the identity provider, the user will be able access Cloud Access Manager but they will not see any of their old data as Cloud Access Manager recognized this as a different account.

Account Ownership Transfers

  • If a Cloud Access Manager account needs to be transferred to a different account, the owner will need to open a support case and upon request from Teradici, provide the following information:
    • Cloud Access Manager Authorization token from the old account: This needs to be provided by the user.
    • Cloud Access Manager Authorization token from the new account: This needs to be provided by the user.
    • Cloud Access Manager Authorization token from Cloud Access Manager support : This needs to be provided by Teradici Global Support Services group.

For information on how to obtain a Cloud Access Manager authorization token from the Cloud Access Manager Admin Console, see here.

All the tokens are acquired by authenticating the identity provider and as a result must have specific permissions in order to succeed.

The two general use-cases for requiring an account ownership transfer are:

Owner account is disabled and access to the old account is possible

In the scenario where the account owner leaves the organization and their account is permanently disabled but it is possible to access the old account, an account transfer can be undertaken. The following steps need to be followed:

  1. The user's IT organization needs to reactivate the account and sign into Cloud Access Manager Admin Console.
  2. Create a support ticket. See here for information on creating a support ticket with Teradici.
  3. Provide an authorization token from the old account.
  4. Provide an authorization token from the new account. Cloud Access Manager operations uses the above information to migrate the accounts.
  5. Disable the old account once more.

Owner account is disabled and access to the old account is not possible

In the scenario where the account is permanently disabled and access to old account is not possible then there is no way to validate the authenticity of the request and requester. An account transfer cannot be completed.

Performing an Account Ownership Transfer

The following steps outline how to transfer a Cloud Access Manager user account:

  1. Sign into the Cloud Access Manager Admin Console with the old account.
  2. Click the user account icon and click on the Get API token.
  3. Copy the token and sign out of the Cloud Access Manager Admin Console.
  4. Do the same process with the new account and copy the token again.
  5. Send the old account and new account tokens to Teradici and the transfer needs to be processed within 2 hours of receiving the tokens.