Vendor admin for multiple vendors

Hi everyone,

we’re currently running BeyondTrust PRA 25.1.x and are looking for a way to delegate vendor management tasks to an internal operations team.

We have several vendors in PRA, and we’d like to have an internal team that’s responsible for managing a subset of them. Ideally, this internal team should be able to:

Create and delete vendor user accounts
Extend or reactivate expired vendor accounts
Send password reset emails to vendor users

Basically, they should act as vendor administrators for specific vendor groups — but without being full PRA admins.

We’ve looked through the admin console and documentation, but it seems there’s currently no privilege or role that grants “vendor admin” rights — i.e., no way to delegate vendor user management without also granting global admin access.

Questions:

Is there any supported method to delegate vendor user management (create / extend / reset) to internal users without giving them full administrative rights?
Has anyone implemented something like this using automation or API scripts to bridge the gap (if necessary)?
Would this be considered for a future feature (a “Vendor Admin” role)?

For context:

We’re on the 25.1.x branch
Ideally, internal users would log in via federated SSO (SAML / OIDC)
If possible, we’d also like to leverage SCIM for provisioning

Any guidance, workarounds, or roadmap info would be appreciated!

Thanks,

Markus

Page 1 / 1

Hey @PBG-Infra - sorry I don’t have a solution to the challenge you’re facing - jumping in for some notes on feature requests/roadmaps/product management options.

For submitting a feature request, I would recommend submitting an idea to the ideas portal (top banner). They help the product team understand the different use cases and scope of user base with this use case (voting helps!)

You can also ask questions to our product team directly on the monthly roadmap webinars if you are able to make it. If you’re not able to make it, you can register and be sent the recording:

2025 Product Road Map Sessions | BeyondTrust

For even more ways to chat with product and others, the quarterly user groups might be of interest:

Americas PRA User Group: Americas PRA User Group | BeyondTrust

These are always listed under Events: Upcoming Events | BeyondTrust

Thanks for the post.

Have you read through our vendor documentation?

I do believe that you can certainly use vendor admin management - https://docs.beyondtrust.com/pra/docs/on-prem-vendors#what-are-vendors

https://docs.beyondtrust.com/pra/docs/on-prem-vendors#add-vendor-administrator

Hope this helps.

Todd

Thanks for the post.

Have you read through our vendor documentation?