Employee monitoring for MSPs: what breaks at multi-tenant scale
Single-tenant monitoring tools break at MSP scale in three ways: one account per client causes login and invoice sprawl, per-user pricing rises whenever a client hires, and access controls can't limit a technician to specific clients. Multi-tenant design fixes this by consolidating logins, tying cost to console access instead of headcount, and scoping permissions per client.
Published · Updated
Monitoring tools assume one organization. An MSP's unit is a portfolio.
Problem one: one vendor account per client
Single-tenant tools default to one account per client. Fine at two clients, costly at twelve:
- Technicians juggle a dozen credentials
- Configuration drifts across accounts
- Offboarding touches every account
- You reconcile a dozen invoices
- Cross-client reporting is manual
The fix: one account holds every client as its own space, with a single team login.
Problem two: cost that follows your clients' headcount
Per-monitored-user pricing raises your cost whenever a client hires, work you didn't do. Below twenty employees, deployment effort costs more than you can charge, so smaller clients get skipped.
Your cost per client is console access and rollout support, steady from thirty to sixty employees. See SnitchOS pricing or the per-admin vs. per-user pricing math.
Problem three: access scoping built for one company
Access scoping in single-tenant tools serves one company: everyone is admin, manager, or viewer. A technician can be limited to specific clients, but only by which separate-account credentials they hold, which can't be shown to a client.
What you want is assignment: admins work account-wide, managers see only assigned clients, full or read-only.
What to check before you commit to a tool
Check these before you sign:
- Can one login move between clients?
- Can a manager be scoped, read-only?
- Does adding a client change your price?
- Does it deploy silently via RMM?
- Is there an audit trail across clients?
- Can a local admin uninstall the agent?
Limits
Multi-tenant design has trade-offs: MSP-built products tend to be younger and shallower on reporting than decade-old tools. SnitchOS is Windows only, signing in only through Microsoft 365 or Google, ruling out mixed fleets and clients with neither.