Provision customers and users

ThingsBoard Edge inherits user access from the ThingsBoard server automatically. Customers and users cannot be created directly on Edge. All user management is performed on the server, and the relevant accounts are propagated to Edge once an Edge instance is assigned to a customer.

Two types of users can log in to ThingsBoard Edge:

• Tenant Administrator: All Tenant Administrators on the ThingsBoard server can log in to any connected Edge instance without additional configuration. They can create and delete devices on Edge and have read access to all other entities available on that instance.
• Customer User: A Customer User can log in to Edge only if the Edge instance has been assigned to their Customer account on the server. Once assigned, they can view only the entities that are assigned to both the Edge instance and their Customer account. An entity assigned only to the Edge, or only to the Customer, is not visible to Customer Users.

Before assigning an Edge instance to a customer, make sure the customer account and its users exist on the server.

1. Log in to the ThingsBoard server and go to Customers. Click Add customer (+) and enter the customer details.

2. Open the customer and go to the Users tab. Click Add user (+), enter the user’s email address, and assign a role.

3. Click Add. An activation email is sent to the user. The user must activate their account before they can log in to Edge.

For details, see Customers and Users.

1. Log in to the ThingsBoard server and go to Edge management → Instances.
2. Click the Edge instance to open the context menu and select Assign to customer.
3. Select the customer from the dropdown and click Assign.
   All Customer Users of the selected customer can now log in to Edge and view entities assigned to both the Edge instance and their customer account.

Select Make Edge public from the context menu to make the Edge instance accessible to all customers rather than a specific one.

The table below summarizes what each user type can do on a connected Edge instance.

Role	Create and edit	Delete	Read
Tenant Administrator	Devices	Devices	All entities on Edge
Customer User	—	—	Entities assigned to both the Edge instance and their customer account

Removing the customer assignment revokes Customer User access to Edge immediately. Tenant Administrator access is not affected.

1. Log in to the ThingsBoard server and go to Edge management → Instances.
2. Click the Edge instance to open the context menu and select Make Edge private.
3. Confirm the action.
   Customer Users of the previously assigned customer can no longer log in to the Edge instance.