Create a New User
How MSP admins add a new user for their own organization or for a customer tenant in Synthreo Canopy, with the right product access.
Application: Synthreo Canopy (canopy.synthreo.ai)
Role: MSP Administrator
Overview
Section titled “Overview”New users are added through User Management in Canopy. As an MSP admin you create two kinds of accounts:
- MSP users - staff in your own organization. These are added in your own Canopy session, exactly like a parent-tenant user.
- Customer users - end users who belong to a specific customer tenant. These are added against that child customer, either from the Customers tab or from inside a delegated session for that customer.
The mechanics of adding a user (the Add User form, the welcome email, bulk import) are identical to standard Canopy user creation, so the steps and screenshots live in the canonical guide:
➡️ Adding a New User in Canopy - covers both parent-tenant (your MSP) and child-customer accounts, plus bulk import and resending welcome emails.
Product access for MSP scenarios
Section titled “Product access for MSP scenarios”When you add a user, you also choose which Synthreo applications they can reach. The product-access choice is what differs between MSP and customer staff:
| Product Access | Grants access to | Typical use |
|---|---|---|
| ThreoAI | The ThreoAI chat interface (granted by default) | All users |
| Builder | The Synthreo Agent Builder | Builders and power users |
| Canopy (Tenant Management) | The Canopy admin console | Your MSP admins; and customer admins who manage their own tenant |
Grant Canopy access to:
- your own MSP staff who administer customers, and
- a customer admin who should be able to manage their own tenant directly.
For how permissions and roles work after the account exists, see Managing Permissions.
Notes for MSP admins
Section titled “Notes for MSP admins”- A user account belongs to a single tenant. To give someone access at both the MSP level and a customer level, create a separate account in each.
- Changes made in a delegated session apply only to that customer’s tenant.
- Only users with Canopy (Tenant Management) access can sign in to canopy.synthreo.ai.

