I wish to create a VPN hub which users from a 2nd level company can use. However I want to create this VPN hub from a user which is on the 1st level company in our hierarchy.
The issue is this: if I create a VPN hub using my 1st level company account, accounts on the 2nd level company cannot see or use the hub, even after they have been added to the hub as clients.
Is there any way that I can do all the VPN hub setup and administration from my 1st level company user, and have the VPN hub set up on the 2nd level company for its users?
Unfortunately, it is not possible to create a VPN hub from the 1st level company for use by a 2nd level company, as the VPN hub is automatically assigned to the company in which the user is currently logged in. However, you can create a VPN hub from the 2nd level company and manage it through the 1st level company. Here’s how you can do this:
1.First, create a custom role that allows users in the 2nd level company to view VPN hubs.
In RMS, navigate to Administration → Users.
Click the arrow next to + INVITE and select Create new role.
In the newly opened tab, ensure you have selected the 2nd level company.
Choose the necessary permissions that allows users to see VPN hubs (temporarily allow users with this role to create VPN hubs temporarily).
2. Assign this role to the user in the 2nd level company.
Log in with the user who has this role, and you will be able to create a VPN hub.
Once the VPN hub is created, switch back to your 1st level company user, and you should see the VPN hub available there.
Note: After the VPN hub is created, make sure to remove the permission that allows VPN hub creation for the 2nd level company users.
Do you know if the ability to add VPN hubs for lower level companies from a 1st level company user will be added to RMS at some point?
This workaround you’ve described works, but if my RMS had multiple 2nd level companies, I would need to create additional accounts for each company just to create VPNs for my companies, which is a bit cumbersome.
Do you guys have a place where new features can be requested?
We understand the need for VPN hub management from a 1st-level company across all sub-companies. I’m happy to inform you that the ability to add VPN hubs for sub-companies from a 1st-level company user is currently planned for release in Q1 2025.
For reference, I have found another workaround which is to use the .ovpn file which can be distributed to the clients who require VPN access. The one drawback with this however is the security as no login can be enforced through OpenVPN once someone has the .ovpn file.