Organization roles
Organization administration does not itself grant access to workspace data. Use Grant access… to give yourself or another existing member an explicit workspace role. Only organization owners can grant the workspace Owner role. The person who creates a new workspace becomes its workspace owner.
Removing an organization role leaves that person’s workspace memberships unchanged. To remove all access, remove the organization role and revoke each workspace membership. Neo prevents removal or demotion of the last organization owner.
Create a subsidiary workspace
1
Open Organizations
Open the account menu and select Organizations. Select the organization that owns the subsidiary.
2
Create the workspace
Select Create workspace. Enter its name, timezone, PSA, and data region. You can use the Microsoft directory connected to another workspace in this organization or connect a separate directory later.
3
Set up billing and integrations
Neo opens the new workspace’s plan page. Each subsidiary requires its own paid plan. Its integrations and credentials start separately; Neo does not copy another workspace’s PSA or RMM credentials.
4
Invite its team
Invite people from the workspace’s Users page with their name, work email, and role. They accept the email invitation using Microsoft sign-in. Invitees gain access only to this workspace.
Microsoft directories and sign-in
A workspace can have its own Microsoft directory or share one with other workspaces. Sharing a directory does not give its employees access to every connected workspace. Neo checks each person’s active workspace memberships after sign-in. One accessible workspace opens directly. People with several memberships can switch workspaces, with their role shown separately in each. The switcher also shows the workspace’s organization. For a separate directory, a workspace owner from that company opens Microsoft directory in the account menu and selects Connect my Microsoft directory. Neo uses the directory of their verified sign-in; nobody needs to enter directory or object IDs. Each Microsoft integration still needs its own consent and setup. Contact Neo to change an existing directory connection. Workspaces connected to the same directory use the same external Microsoft resources. Neo keeps its workspace records and credentials separate. The existing limit of one branded Teams bot installation per Microsoft directory still applies; use the dashboard to select among multiple workspaces.Add organization administrators
Invite a person to a workspace first. After they accept, an organization owner can select them under Organization administrators, choose Owner or Admin, and select Save organization role. A pending invitation cannot receive organization authority.Bring an acquired MSP into the organization
Contact Neo to move an existing workspace. Neo verifies ownership, selects the destination organization, and confirms the transfer. Existing workspace memberships and billing remain unchanged. The destination organization’s administrators can then explicitly grant access. An invitation between companies does not move a workspace or establish an ownership relationship. A shared email domain, Microsoft directory, or Stripe customer does not establish ownership either.Billing
Each new subsidiary sets up a separate paid plan. Creating an organization or moving a workspace does not combine Stripe customers, subscriptions, credit balances, or invoices. Existing billing arrangements remain in place. Consolidated organization billing is outside this release.Audit and API access
Recent organization activity records creation, role changes, workspace access grants, directory connections, and transfers. It displays the latest 100 events. The public API provides organization administration for signed-in Microsoft users under/public-api/organizations. Workspace API keys can read only their current parent organization through GET /public-api/organizations/current; they cannot create subsidiaries, change organization roles, or grant cross-workspace access. Neo Support can explain these actions and direct an administrator to the dashboard.