Support tiers
What Is Tier 1 Support?
Tier 1 support is the first line of an IT help desk or service desk. Tier 1 analysts answer the calls, chats and tickets that come in, log and prioritize them, fix the common problems themselves, and pass the rest to Tier 2 with notes good enough that nobody has to ask the user the same questions again.
Most Tier 1 tickets are familiar: password resets, account lockouts, printers, Wi-Fi and VPN trouble, new-hire setup, and access requests that follow a standard approval. The fix is often quick. The harder part is checking who's asking, working out how big the problem is, keeping the user calm, and recognizing when a ticket isn't yours to fix.
What a Tier 1 analyst does in a shift
A typical Tier 1 shift is a mix of four kinds of work:
- Taking and logging contacts. Every call, chat or email becomes a ticket with a category, a priority and a short, factual description. If it isn't in the ticket, it didn't happen.
- Resolving the known problems. Clearing a lockout after verifying the caller. Clearing a print queue. Walking someone through reconnecting to the VPN. Most desks give Tier 1 a knowledge base of approved steps for these.
- Handling standard requests. Software from the approved catalog, access to a shared folder once the owner has approved it, a loaner laptop. These follow a process rather than a fix.
- Spotting what doesn't belong at Tier 1. Twenty tickets about the same outage, a “CEO” asking you to switch off MFA, a lost laptop. Tier 1 doesn't solve these alone. The job is to notice them fast and get them to the right people.
Tier 1 vs Tier 2 vs Tier 3 support
Different companies draw the lines in slightly different places, and some use “Level 1” or “L1” instead of “Tier 1”. The overall shape is usually the same:
| Tier | Who | What they handle | Typical access | Example |
|---|---|---|---|---|
| Tier 0 | Self-service | FAQs, password self-reset, request portal | None needed from IT | A user resets their own password through the portal |
| Tier 1 | First-line help desk and service desk analysts | Intake, triage, known fixes, standard requests, escalation | Ticketing tool, knowledge base, basic admin (lockouts, resets, reassigning) | Verifying a caller, then resetting their password |
| Tier 2 | Desktop support, senior analysts, sysadmins | Problems the knowledge base doesn't cover, deeper troubleshooting, on-site work | Wider admin rights on endpoints, servers or apps | A laptop that keeps losing its domain trust |
| Tier 3 | Engineers and specialists (network, identity, apps) | Root cause, design-level fixes, changes to infrastructure | Full admin on the systems they own | A switch misconfiguration behind a floor-wide outage |
| Tier 4 (sometimes) | Outside vendor or manufacturer | Hardware warranty, vendor bugs | Vendor-side | A faulty batch of docks under warranty |
Two things the table doesn't show:
- Tier 1 owns the user even after escalating. On most desks Tier 1 still sends the updates, or at least makes sure someone does. The user shouldn't have to chase anyone.
- Escalating isn't failing. Escalating late, or with nothing in the notes, is the failure. Escalating early on purpose, as with a security incident or a widespread outage, is part of doing Tier 1 well.
When Tier 1 escalates, and what a good handoff note includes
Escalate when the fix needs access you don't have, when the knowledge base runs out, when it's a security incident, or when several users report the same thing at once. A handoff note Tier 2 can act on without calling the user back includes:
- Who and how many. One user, one team, one floor, everyone.
- What they see. The exact error text or behaviour, and when it started.
- What changed. New location, password change, update, desk move.
- What you already tried and what happened.
- Business impact and deadline. “Presenting to the board at 10:00” changes the priority.
- What you told the user and when they'll hear back.
Skills Tier 1 is hired for
Hiring managers for Tier 1 roles tend to listen for the same four things. They're also the four skills the simulator scores:
- Security. Confirm who's asking before you reset a password or grant access, even when the caller is in a hurry or claims to be important.
- Empathy. Acknowledge the problem before you start fixing it. A correct fix delivered coldly still ends in a complaint.
- Escalation. See when many tickets are really one incident, and hand off with what you already know.
- Troubleshooting. Get the person working again first, then find the cause, then write it down.
The technical knowledge matters too (DNS, DHCP, Active Directory basics, how a VPN connects), and it's what you study for. The four skills above are what you practice.
How Tier 1 looks at different employers
The ticket types repeat everywhere, but the context changes. An MSP Tier 1 analyst juggles several client environments and their contracts. An internal IT desk knows one environment deeply. A SaaS support desk deals with customers rather than colleagues. A school desk gets a rush in the first week of term, and a clinic desk works around patient privacy rules. Our Tier 1 practice packs by employer type cover each of these, and the plans are on Pricing.
How to practice Tier 1 work before day one
You can study the technical side from books and a home lab. The judgment side, what to do first and what to say, is easier to learn by working through tickets:
- Work the 25 free practice tickets. Each one is a Tier 1 decision with feedback on every option.
- Read a few common help desk ticket examples to see the patterns.
- Take the free help desk practice test to see which of the four skills is weakest.
- If you have an interview coming, the help desk interview questions guide has a section on Tier 1 questions.
- For a full study plan including a home lab, see free help desk training.
Quick answers
Is Tier 1 support an entry-level job?
Usually, yes. Many Tier 1 roles don't ask for previous IT experience, though postings often mention a certification or customer-facing experience. It's a common first job in IT because you see a bit of everything.
Is Tier 1 the same as help desk?
Mostly. “Help desk”, “service desk” and “Tier 1 support” are often used for the same first-line role. The service desk vs help desk guide explains where the two terms differ.
What's the difference between L1, L2 and L3 support?
It's the same model with different names: L1 is Tier 1 (first line), L2 is Tier 2 (deeper troubleshooting), L3 is Tier 3 (engineers who own the systems).
Do I need a certification for Tier 1?
Not always. Some employers ask for one and many don't. A certification shows you've studied the technical basics. It doesn't show how you'd handle a stressed caller or a suspicious request, so practice both.
Does Tier 1 only do password resets?
No. Resets are common, but a Tier 1 queue also includes hardware, connectivity, access requests, onboarding and the first response to security incidents.