docs: Add MSP tenant resource access guidance (#630)

Document two approaches for MSPs to access resources inside client
tenant networks: inviting an MSP user via email subaddressing
(recommended) or adding a network and routing peer.
This commit is contained in:
Jack Carter
2026-02-19 19:06:24 +01:00
committed by GitHub
parent 67fec9487f
commit 1239aceafe

View File

@@ -151,4 +151,23 @@ setting up a new tenant plan. After the 14-day trial ends, the MSP account will
Just like with the free trial, you have the flexibility to verify your tenant's domain at a later time, making it easier
to demo NetBird to companies that aren't yet your customers. However, if someone logs in using the same domain, NetBird will
create a separate account to avoid any security risks. We hope that the ease of use and advanced security features of NetBird will help drive
your business growth and attract new customers.
your business growth and attract new customers.
## Access Resources Inside a Tenant
MSPs can access resources inside tenant networks in two ways:
**Option 1: Invite an MSP User to the Tenant (Recommended)**
Use email subaddressing to create a user inside the tenant for your MSP engineers. For example, if your engineer's email is `engineer@yourcompany.com`, use `engineer+clientname@yourcompany.com`.
1. Switch to the client tenant using the tenant switcher.
2. Go to **Team** → **Users**.
3. Click **Invite User** on the right.
4. Enter the subaddressed email (e.g. `engineer+clientname@yourcompany.com`).
This is the recommended approach as it gives the MSP engineer a proper identity inside the tenant. Use NetBird's [profile switching](/client/profiles) feature to easily switch between your MSP account and client tenant connections on the same device.
**Option 2: Add a Network and Routing Peer**
Add a NetBird Network and a routing peer on the client tenant's infrastructure under the MSP account.