Multi-Tenancy and Security Profiles

Use security profiles to control the way your tenants are managed. Whether you want total control over all your tenants or self-managing tenants or something in between, security profiles can be modified to suit any model. For example:

Global Administrator Total Control

  • Remove (or re-assign to another profile) any users from existing tenants that belong to the "Administrator" security profile.

  • Remove the default "Administrator" security profiles from all existing tenants, and whenever a new tenant is created.

  • (Optional) The default "Tenant Administrator" security profile should be sufficient to allow a provider user to act as global administrator for all tenants, however there are some missing permissions you may want to add back in such as Playback and Create Evaluation.

Self-Managing Tenants

  • Add the default "Administrator" security profile to any existing tenant that does not have one (new tenants are always created with this profile).

  • Create administrator users in each of your tenants in order for them to manage their own tenant instance.

  • (Optional) Restrict the default "Tenant Administrator" security profile in the provider as you see fit, although you will need to retain at least the "Manage Tenants" and "Add/Edit Users" permissions in order to setup new tenants.

You cannot edit the security profile your current logged in user is using, so this normally requires a new profile to be created instead.