The access-rights system within eGuard is designed to enable delegation both within a single company and across companies. Within a single company, there may be multiple administrators with equal rights. eGuard reflects this as administrators managing the same group. If a company has subsidiaries or franchisees, it may be desirable to delegate administration of certain devices to particular subsidiaries/franchisees. eGuard reflects this by assigning the device to a subgroup of the main group and then having the subsidiaries/franchisees be administrators of those subgroups. In this fashion, subsidiaries/franchisees have full control over their own devices, while still giving full rights to the administrators of the parent company.
Another type of delegation occurs when an entity owns a set of devices but wants to grant another entity the right to manage all or some of the devices. In eGuard, this can be accomplished by assigning the devices to a subgroup and then granting the second entity the right to manage that group. The manager will be able to manage the devices within the subgroup he or she manages (e.g., turn on/off remote administration) but will not be authorized to affect the rights of the first entity (administrators).
As a rule-of-thumb, if you're a reseller and you have a customer that buys more than one or two devices from you, you'll probably want to create a new sub-group for that customer. Make that customer the administrator of that sub-group. When you sell a device to that customer, use eGuard to assign the devices just sold to the customer's sub-group. This way, the customer will have full control over his/her devices. You will still have access to the device, but should of course respect the customer's ownership. Note that the customer can then create his or her own subgroups and sub-divide administration of the devices even further.
If a customer buys a device through some channel and then hires a third party to install the device, it is often useful to allow the installer to manage the device(s) that were installed for the customer. This way, the installer has an easy way to track the health of the device(s) that s/he installed and it also allows the installer to make, e.g., adjustments to a device's settings if needed. This can be accomplished in eGuard as follows: the customer creates a subgroup for the installer and then allows the installer to manage that subgroup ( without marking the installer as an administrator).