There are two types of WatchGuard Cloud accounts — Subscriber and Service Provider. Your account type determines whether you can manage other WatchGuard Cloud accounts, which operator roles you can assign to users in your account, and how you manage operators for your account.
If you use security services such as AuthPoint, but do not manage other accounts, your WatchGuard Cloud account is a Subscriber account. From WatchGuard Cloud, you can configure and manage your own security services and see related metrics and reports.
Subscriber accounts can have these operator roles: Administrator, Analyst, Observer.
Service Provider Account
If you manage customer accounts, your WatchGuard Cloud account is a Service Provider account. From WatchGuard Cloud, you can manage your inventory and allocate devices, licenses, and AuthPoint users to customer accounts. You can also manage security services for your own account and for all customer accounts that you manage.
Service Provider accounts can have these operator roles: Owner, Sales, Helpdesk, Auditor.
If you are a WatchGuard Partner, your WatchGuard Cloud account is automatically provisioned as a tier-1 Service Provider account.
WatchGuard Cloud is a multi-tenant, multi-tier system. The terms tier-1, tier-2, and tier-3 are used to distinguish the different levels of Service Provider and Subscriber accounts.
A WatchGuard Cloud account that is associated with a company account on the WatchGuard Portal is a tier-1 account. If you activate WatchGuard products and services in your own WatchGuard Portal account, your WatchGuard Cloud account is a tier-1 account.
A tier-1 account can be a Service Provider or Subscriber.
In a tier-1 WatchGuard Cloud account, operators use the same user account credentials to log in to WatchGuard Cloud as they use to log in to the WatchGuard Portal (www.watchguard.com).
Tier 2 and Tier-3 Accounts
Accounts that are not tier-1 are referred to as tier-2 or tier-3 accounts.
You can create accounts in up to three tiers (for example, Tier-1 Service Provider > Tier-2 Service Provider > Tier-3 Subscriber).
A tier-2 account can be a Service Provider or Subscriber. Tier-2 accounts that are Service Providers can also have their own tier-3 customer accounts.
The diagram below shows an example of the WatchGuard Cloud account structure.
The primary difference between tier-1 accounts and tier-2 accounts is how and where you manage the operators for your account.
For tier-1 accounts, operators are users with a WatchGuard Portal account. If you have a tier-1 account, you manage your operators in Support Center. From WatchGuard Cloud, you can only see the operators on your account and change their role.
If you have a tier-2 account, you can manage your operators in WatchGuard Cloud.