Organization Settings
Click 日本語 for Japanese
This article describes the organization-level management features under the Organization tab of the Meraki Dashboard. These features are limited to organization administrators, a network administrator does not have access to these settings.
Monitor
Overview
By choosing Organization > Overview, you can see a summary of all of the networks in a particular organization. Clicking Expand on the floating network list to the right of the page will display more detailed information about each network. The usage data at the top of the expanded network list top summarizes cumulative usage across all networks, and the map shows network locations with color-coded markers corresponding to the network list. Mouse over a network in the list and the network marker on the map is highlighted.
Please refer to our documentation for more information about the Organization Overview Page.
Change log
Click Change log to view configuration changes to any of the networks in your organization from within the last 14 months in the EU, and two years in the rest of the world. The log contains the following information for each change:
- Time: Time the change was made in UTC.
- Admin: The username of the administrator who made the changes.
- Network: The Dashboard network in which the change was made.
- SSID: The SSID that was altered (MR, MX60W and Z1 only)
- Page: The Dashboard menu page where the changes were made.
- Label: The configuration section or option that was changed.
- Old Value: The value of the option prior to the change.
- New Value: The value of the option after the change.
Login Attempts
Clicking on Login Attempts will show past login attempts for the Dashboard Organization. This includes logins from normal Dashboard Admin accounts and SAML login attempts. For each login attempt we will record the following information:
- Email: The email used for the login attempt
- IP Address: The IP address the login attempt came from
- Location: The approximate geo-location the login attempt came from
- Type: The type of login attempt
- Status: If the login attempt was successful or not
- Timestamp: Timestamp of the login attempt
Security Center
Clicking on Security Center will display any events related to Advanced Malware Protection and Intrusion Detection/Prevention for any network within the Organization. This includes AMP blocked events, Intrusion Detection alerts, most affected clients, and the most prevalent threats detected. For more information on the Security Center please refer to the Security Center KB article.
Location Analytics
Selecting Location Analytics will display information about wireless devices that have been seen by Meraki Access Points. Location Analytics utilizes 802.11 management frames that are transmitted at regular intervals from WiFi devices. These frames contain information that can be used to identify presence, time spent, and repeat visits within range of a WiFi access point. Cisco Meraki leverages our wireless APs in conjunction with our cloud infrastructure to gather this data and present it in an aggregate view on the Meraki Dashboard. This is done through intuitive and customizable graphs that can be used to understand trends such as capture rate (passersby vs. visitors), user engagement (total time spent), and visitor loyalty (new vs. repeat visits). For more detailed information about Location Analytics please refer to our Location Analytics article.
Configuration Templates
Click on Configuration Templates to begin creating templates to attach new or existing networks to. Configuration templates allow you to define and manage Network settings for multiple near-identical networks from a single location. By attaching a network to a template, the network will inherit any settings that are configured on the template. Changing a setting in the template will immediately change that setting for any child networks that are attached to that template. For more information about how templates work and how to configure them please see our Configuration Templates article.
VPN Status
The VPN Status page shows current and historical VPN status information for both Meraki and non-Meraki VPN connections for each network within the Organization. This includes information about connectivity, data usage between sites, latency information, number of subnets advertised, and number of peers (Meraki and non-Meraki) connected. More information about the connections for a specific network can be had by clicking on that network.
Firmware Upgrades
The Firmware Upgrades page allows you to view the current firmware version for any network within the Organization and also schedule firmware upgrades and downgrades for any network. Additionally, you can review the release notes for any recent firmware versions from the upgrade page. For a more detailed overview of how to use the Firmware Upgrades page to manage firmware for your networks, please refer to our Managing Firmware article.
Summary Report
Clicking on Summary Report will allow you to review information about each network individually or for all networks within an Organization. This information includes top clients by usage, top applications by usage, top device manufacturers, and more. You can also create and customize scheduled reports for individual networks, specific groups of networks, or the entire Organization. For more information on how to create these reports and other information about Summary Reports please refer to our Summary Report KB article.
Configure
Settings
From the Organization > Configure > Settings page you can update the name of or delete an Organization, modify security settings for Administrator accounts, and configure API and SNMP access for the Organization.
Organization Name
Change the name of the Organization using the text box. The Organization name is simply an identifier for the Organization and can be changed at any time.
An organization name can have a maximum length of 255 characters
Security Settings
-
Password expiration: Configure password expiration timer in Days
-
Used passwords: Restrict the number of re-used passwords
- Strong Passwords: Enforce strong password policy
- Users will be forced to choose secure passwords of at least 8 characters that contain 3 of the following:
• number
• uppercase letter
• lowercase letter
• symbol ( ! @ # $ % ^ & *, etc ) - Users will not be able to use a password containing common words or names
- There is also a setting to increase the minimum password length to 12 characters instead of the default minimum of 8 characters.
- Users will be forced to choose secure passwords of at least 8 characters that contain 3 of the following:
- Account lockout: Configure how many times a user can enter the wrong password before being locked out
- Idle timeout: Configure how long a user can be inactive for before they are logged out. Multi-org users are limited by the shortest idle timeout value in any of the organizations they are part of.
- Two-factor authentication: Force all users in the organization to configure and utilize two-factor authentication (2FA). If two-factor authentication is enabled, users will need to contact support to assist in disabling 2FA.
- Login IP ranges: Specify IP ranges from which administrators can access the Dashboard, Vision Portal, and the Dashboard API
The Idle timeout setting applies to both SAML and non-SAML administrator accounts.
Login IP ranges has two options to select from. Option one is to allow dashboard and API access to the specified IP ranges. Option 2 is to allow API access only. If both options are selected you need to specify the IP address range in the two options to be able to use the API.
When an OAuth 2.0 integration is explicitly authorized, it operates independently of the login IP range restrictions. This means that applications using OAuth 2.0 tokens can access permitted resources from any IP address, regardless of the IP range controls you have configured for standard logins or API key usage. OAuth 2.0 integrations can be revoked at any time through the integrations page: Organization > Integrations > My Integrations.
With the exception of the Idle Timeout setting, security settings do not apply to SAML administrator accounts.
RADIUS servers
Define a RADIUS server at the organization level. These RADIUS servers can be selected and applied to any Switching access policy within the organization. This section shows the full list of RADIUS servers in the organization and the networks where the RADIUS servers have been applied. Expand "Actions - see where it's applied" to see a full list of access policies where the RADIUS servers have been applied.
When editing an existing RADIUS server, the update will be applied to all networks and access policies that utilize the RADIUS server.
The RADIUS servers defined here are currently only applicable to MS and CS switching access policies.
Authentication
Use the dropdown to enable and configure SAML login information for Dashboard Administrators. For more information about configuring SAML logins please refer to the following documentation.
Configuring SAML Single Sign-on for Dashboard
Administration
Manage Alerts
- Licensing - When "Licensing" is chosen, only Organization Admins will receive licensing alerts. (Network-only and SAML admins will not receive licensing alerts.)
- Licensing, hardware defects, maintenance - When "Licensing, hardware defects, maintenance" is chosen these types of alerts will be sent to the selective Dashboard Administrators in the text box located below "Send to selective Dashboard administrators".
- Only Dashboard Administrators that are configured on the organization are a valid option for the text box.
- The text box allows for multiple Dashboard Administrators to be input as long as they are separated by commas.
- None of the Above - When "none of the above" is chosen, Organization Admins and all Network Admins in this organization will receive notifications.
Special Announcements
Special announcements are notifications that may not be network-specific.
- All organization admins with full access - All special notifications will be sent to all full organization administrators on the dashboard.
- Send to a mailing list you manage - You can add a single email address that will be the only recipient of the special announcements.
All organization-wide alerts will be sourced from the same email address. To ensure that alerts are not being lost to a spam filter, please be sure to add noreply@meraki.com, and noreply-support@meraki.com as trusted email sources.
Manage visibility of Dashboard Banners
This feature allows you to control the types of banners displayed on your Meraki dashboard at the organization level. Banners are separated into two categories: Critical and Non-Critical.
- Critical Banners - Critical banners include notifications of global server outages, emergency server maintenance, and large-scale incidents.
- Non-Critical Banners - Non-Critical banners include notifications of system maintenance, firewall test warnings, firmware upgrades, cloud authentication certificate rotation notifications, any product-related announcements, cloud archive migrations, and invalid VLAN tags.
Configuration options include the following:
- Display Critical and Non-critical dashboard banners - All Critical and Non-Critical banners are displayed.
- Display only Critical dashboard banners - When chosen only Critical banners are displayed on the dashboard while hiding Non-Critical banners.
- Hide Critical and Non-Critical dashboard banners - This option allows users to remove the visibility of both critical and non-critical banners on the dashboard. This means that any banners classified as critical or non-critical will no longer be visible on the dashboard once this option is selected.
When choosing the option to "Hide Critical and Non-Critical dashboard banners" it is important to note that security-related banners, such as those related to weak passwords or the need to enable two-factor authentication, will still be displayed. This is to ensure that users are aware of and take action on important security vulnerabilities.
Meraki Support Access
Checking the "Block Meraki Support" box will prevent Meraki Support from viewing any information about your Organization or any networks within that Organization.
For more information about controlling Support access please refer to this documentation.
This setting will need to be disabled to receive assistance from Meraki Support.
Privacy
When enabled, new networks will be created with privacy-sensitive features disabled by default. You can turn these features on at any time. For example, location analytics will initially be disabled in the new network but you can turn it on at any time.
SNMP
Use the appropriate dropdown menu to enable SNMP access for the Organization. This enables SNMP polling of the Organization through the Dashboard Cloud Controller. To enable SNMP polling directly to devices from a local NMS, you will need to go to Network-wide > General and enable SNMP access on a per-network basis. For more information about configuring SNMP please refer to our SNMP Overview and Configuration Guide.
Threat Grid
Use the dropdown menu to enable and configure Threat Grid integration. Threat Grid requires an Advanced Security license to integrate with the Dashboard in addition to a Threat Grid subscription. For more information about Threat Grid please refer to our documentation on Threat Grid Integration.
MSP Identification
This ID field is for Service Providers to fill in with their ID if they're managing or assisting in the management of the Organization.
Delete an Organization
To delete an Organization, you must ensure that there are no non-Administrative Users listed under Network-wide > Users, there are no Networks listed under Organization > Overview, there are no active Licenses listed under Organization > License Info, there are no devices claimed in the Organization > Inventory, and that the currently logged in Administrator is the only remaining Administrator under Organization > Administrators. Only if all of the above requirements are met will you be able to delete the Organization.
Warning: Deleting an Organization is permanent. There is no way Meraki Support can recover an Organization once it has been deleted.
Configuration Sync
Configuration Sync is a tool that allows you to copy certain aspects of the configuration from one network to another. For example, you can sync the SSID settings of two different Wireless networks, or sync Whitelisted devices between two different networks. Configuration Sync can currently only be used for uncombined networks, we are unable to sync with a combined network. For more information on how to use Configuration Sync please refer to our Configuration Sync KB article.
MDM
Selecting the MDM page from the menu will allow you to configure or renew any of the following accounts and certificates that are required for various aspects of Meraki's MDM platform. The MDM page includes:
- Android for Work domains
- Apple MDM Push Certificate
- Apple VPP Managed Distribution accounts
- Apple DEP and School Manager tokens
- Chrome OS Device Management accounts
- SCEP CA Certificate
- File Vault recovery key
- Cisco ISE settings
Administrators
The Administrators page displays all current Administrator accounts in the Organization. This includes all full Organization Admins, Network Admins, and special Administrators. From this page you can configure existing Administrator accounts by modifying privileges or adding and removing accounts, in addition to quickly viewing the privileges and account information for any existing Administrator accounts. The information shown on this page includes:
- Admin Name
- Email Address
- Current Network and Organization privileges
- Account status (Locked/Ok)
- Two Factor Authentication (TFA) status
- Last Active date
For more information about configuring Dashboard Administrator accounts and privileges for them, please refer to our Managing Dashboard Administrators article.
License Info
Click License info for licensing details, including total number of devices, licenses, and license expiration date for your organization. There are two licensing options for the Meraki MX series:
- Enterprise Edition
- Advanced Security Edition
Please refer to the Licensing FAQ for more information on Licensing, and our License Info Page article for more information on the License Info page.
Create Network
The Create Network page allows you to create a new Network within the current Organization. From here you can create new networks, add devices from the Inventory into those new networks, and choose if the new network should be a blank network, bound to a template, or created as a clone of an existing network. For more information about creating networks please refer to our Creating and Deleting Dashboard Networks article.
Inventory
The Inventory page lists all devices currently claimed into the Inventory or added to a Network within the current Organization. The Inventory page contains the following information about every device currently claimed to the Organization:
- MAC Address
- Serial Number
- Current Network
- Device Model
- Date claimed to the Inventory
- Associated Order Number
- Regulatory Domain Country
From the Inventory page you can also claim more devices to the Organization, unclaim devices to allow them to be claimed elsewhere, and add claimed devices to an existing network if they are not already added. For more information about the Inventory page please refer to our Using the Organization Inventory article.
Manage Tags
Selecting Manage Tags allows you to configure specific combinations of Network tags and Device tags to help create more customized reports on the Organization > Monitor > Summary Reports page. These combinations allow you to pull information for the Summary Report for specific devices across multiple networks by tagging the networks with one tag, then tagging the specific devices within those networks with a second tag. After doing so, you will be able to select that specific combination of Network tag and Device tag on the Manage Tags page to be available to use to filter the Summary Report by.
More information on managing tags can be found in our Manage Tags article.