Managed IT support is structured across three lines of escalation. Each line has a defined scope — when a problem exceeds that scope, it moves up. This structure ensures the right expertise is applied to every issue, at the right speed, without unnecessary cost.
The table below shows primary responsibilities (✓), escalation involvement (↑) and out-of-scope areas (—) for each support level. No jargon, no ambiguity.
Capability
1st Line
2nd Line
3rd Line
Password resets & account unlocks
✓
—
—
New user setup Account creation, email, device access
✓
↑
—
Leavers & access removal
✓
—
—
Permission & group changes Complex role-based access, policy enforcement
—
✓
↑
Ticket logging & prioritisation
✓
—
—
Basic device troubleshooting Restarts, connectivity, peripherals, display issues
✓
—
—
Hardware fault diagnosis Component-level, drive failures, motherboard issues
—
✓
↑
Hardware procurement & configuration
—
✓
—
Server hardware & infrastructure builds
—
↑
✓
Standard software installation Pre-approved apps, Office, browsers, PDF tools
✓
—
—
Application troubleshooting Beyond basic restarts; config, compatibility, errors
↑
✓
—
Line-of-business application support ERP, CRM, specialist systems
—
✓
↑
Scripting & automation PowerShell, task scheduling, deployment scripts
—
↑
✓
Basic connectivity issues Wi-Fi reconnection, VPN login, cable checks
✓
—
—
Network diagnostics Switch ports, VLAN issues, firewall rules, DNS
—
✓
↑
Network design & implementation New sites, WAN, SD-WAN, infrastructure overhaul
—
—
✓
VPN configuration & management
—
✓
↑
Email setup & basic Outlook issues
✓
—
—
Microsoft 365 administration Exchange Online, Teams, SharePoint, Intune, Entra ID
—
✓
↑
Licence management & renewals
—
✓
—
Cloud infrastructure Azure / AWS environment design, deployment, governance
—
—
✓
Email migration Full tenancy migration, cutover planning, DNS changes
—
↑
✓
Anti-virus alerts & basic remediation
✓
↑
—
Patch management Deploying OS and software updates across the estate
—
✓
—
Security incident response Containment, investigation, remediation
—
↑
✓
MFA & conditional access policies
—
✓
↑
Security architecture & compliance Cyber Essentials, GDPR-aligned controls, audits
—
—
✓
Proactive monitoring Alerting on disk space, CPU, uptime, event logs
✓
✓
—
Server administration Windows Server, roles, Active Directory, Group Policy
—
✓
↑
Backup monitoring & restoration Testing restores, investigating failures
—
✓
↑
Virtualisation Hyper-V, VMware — VM creation, migration, management
—
↑
✓
Disaster recovery planning & testing
—
—
✓
Quarterly business reviews
—
—
✓
Technology roadmap & advice
—
—
✓
Vendor management ISPs, hardware suppliers, software licensing
—
✓
✓
Major project delivery Office moves, infrastructure overhauls, cloud migrations
—
↑
✓