Partner Portal: Managing employee accounts and roles



This article discusses creating, managing, and deleting employee accounts in the Datto Partner Portal. 


  • Datto Partner Portal 


A Datto Partner Portal organization login account can create individual employee accounts, so multiple employees can manage and service Datto devices. Datto's tools share access information, so your employees can log in to each one by using the same username and password. Setting different levels will also affect access to the SaaS Protection store and SaaS Protection NFR accounts. 

  • Only use the Manage Employees page to give your employees Partner Portal access.
  • To give your customers access to the Partner Portal, use the Manage Clients page.
Datto does not recommend using shared accounts, as this is not a secure practice. 
Employee account passwords expire after 90 days of inactivity.


Navigating to Employee Management

1. In the Datto Partner Portal, click the Admin tab, then select Manage Employees from the drop-down menu.

Figure 1: Manage Employees (click to enlarge)

Viewing Employee information

On the Manage Employees page, you can view the following information about each employee:

  • Name, email address and phone number
  • The employee's primary role
  • The products to which the employee has access.

mceclip2.pngFigure 2: Employee information (click to enlarge)

Creating and deleting employees

Creating an employee

To create an employee, click the Add Employees button.

mceclip0.pngFigure 3: Add Employees (click to enlarge) 

3. Enter all relevant employee information and assign the employee a role. Roles dictate which Partner Portal features an employee can access. See the Employee roles section of this article for more details.

4. Click the Create Employee button. If you are creating accounts for multiple employees, check the Add another employee box to cycle to the next employee.

To enable two-factor authentication, you must enter a phone number.

image__3_.pngFigure 4: Employee information and role (click to enlarge)

5. You will receive a popup confirming the new employee's addition.

mceclip5.pngFigure 5: Add Employee confirmation (click to enlarge)

6. The new employees will get an email containing temporary credentials for login. This email will also go to the primary email address for the main Datto Resale Portal Account.

mceclip0.pngFigure 6: Email Login Credentials (click to enlarge)

Billing contacts

Partner employees that you designate as billing contacts can discuss billing matters and receive invoices from Datto. To identify an employee as a billing contact, select Yes under Is employee a billing contact? in the Add employee modal shown in Figure 3. 

Employees assigned the role of Tech cannot be billing contacts.

Adding a new technician to Zendesk

1. Make a new employee account and assign them the role of Tech.

2. Have the new technician log into the Partner Portal. Doing so creates the Zendesk account.

3. Have the technician log into Zendesk with their Datto credentials.

Editing an Existing Employee's Profile

Adjusting existing employees' access will not impact their history or their future use of the Datto Academy & Ticket Portal.

1. From the Manage Employees window, click the pencil icon in line with that employee's name. Doing so will open a screen with the employee's details.

mceclip0.pngFigure 7: Editing employees on the Manage Employees screen (click to enlarge)

2. Edit the relevant details - email address, role, phone number - and then click Save Changes.

mceclip7.pngFigure 8: The Edit Employees modal (click to enlarge)

Changing an existing employee's password

1. Password changes are self-administered. On the Partner Portal login screen, have the employee click Forgot your password? They will then receive an email with a reset link.

mceclip0.pngFigure 9: Password reset from the Employee Login screen (click to enlarge)

Deleting a current employee

You cannot use a removed user's email address to re-register for 48 hours. 

1. Click the wastebasket icon next to the employee's name.

mceclip1.pngFigure 10: Deleting employees on the Manage Employees screen (click to enlarge)

2. A confirmation window will pop up. Click the Delete Employee button to confirm the deletion.

Users cannot remove their user accounts.

mceclip6.pngFigure 11: Employee deletion confirmation window (click to enlarge)

Employee deletion alerts 

You will get an email alert whenever someone removes an employee from one of your resellers.

Reactivating a deleted employee

Click the Reactivate link for the employee you wish to reactivate.

mceclip5.pngFigure 12: Employee reactivation (click to enlarge)

Viewing your team

You can view your team at a glance by scrolling down to the My Team card on the Datto Partner Portal home page. This card also lets you add and manage employees as described above. 

mceclip2.pngFigure 13: The My Team card on the Partner Portal home page (click to enlarge)

Employee roles

Access levels by role are as follows.


  • Full account access to all features
  • SaaS Protection clients
Account Admins in Datto Network Manager have access to all networks on the account but cannot modify user information.

Security Admin

  • All the permissions of the Admin role
  • the ability to access and manage the Company Settings page
  • You can only assign two Security Admins per company

See Assigning a Security Admin to learn more about this role.


  • Access to the Partner Store, the SaaS Protection Store, and the ability to purchase Shadow Protect licenses
  • Access to all Admin pages except status pages, Device Audit, and RoundTrips
  • Access to Integrations, Manage Clients and Manage Employees under the Admin tab
  • No access to Recovery Launchpad
  • Can be designated as a billing contact


  • Access to all status pages, Ticket Portal, integrations, and APIs
  • No access to any marketing or store features
  • Cannot create new SaaS Protection accounts
  • Cannot view SaaS Protection accounts that are NFR
  • Cannot manage employees or users
  • Access to Recovery Launchpad
  • Account Admin access in Datto Network Manager
  • Cannot be designated as a billing contact
Contact Datto SaaS Protection Support to enable the Trusted Tech setting for techs that require the ability to create a new SaaS Protection account.

Sales and Marketing

  • Access to marketing materials and pricing sheets 
  • Can purchase items through the Datto Store
  • Cannot access the SaaS portion of the Datto Store
  • Cannot manage employees or users
  • Do not have access to Recovery Launchpad

EMEA roles

For Partner Portal roles for EMEA accounts, the levels are:


  • Manage employees, customize device status, and configure reseller email addresses, as well as all roles listed below (Devices, Invoices, Orders, Pricing, and Support)
  • Set up SaaS Protection clients


  • Device status, device audit, Recovery Launchpad, and private cloud status
  • Cannot view SaaS Protection accounts that are NFR
  • Cannot create new SaaS Protection clients


  • View invoices and contracts 


  • View the store and place orders


  • View pricing and marketing materials


  • View the Knowledge Base, tickets, and cloud requests
EMEA partners not assigned the role of Admin, Tech, Devices, or Support cannot access the legacy Recovery Launchpad. 

Additional Resources

Was this article helpful?

4 out of 9 found this helpful

You must sign in before voting on this article.

Want to talk about it? Have a feature request?

Head on over to our Datto Community Forum or the Datto Community Online.

For more Business Management resources, see the Datto RMM Online Help and the Autotask PSA Online Help .

Still have questions? Get live help.

Datto Homepage