Allow Service Provider users to perform tenant management
You can allow Service Provider users to perform tenant management. For example, you might use this feature in the following scenario:
You have a Customer Support branch that is responsible for managing 100 tenants. For Customer Support to be able to manage the tenants, they must be provided with tenant management privileges.
To assign tenant management, you must do the following:
-
Create a group for tenant management. See Create and manage groups.
-
Create a group policy for tenant management. See Manage group policies. When you create the policy, be sure to:
- Select the group you created in Step 1: Create a group for tenant management.
- Under the Settings Category, click Add and select the Tenant from the list.
- Under Role, select the role you want to associate with the users in this tenant management group, for example, Auditor. This setting is available only to Service Providers. See Create and manage roles for more information.
noteA tenant role can not be associated with the global policy.
-
Repeat steps 1 and 2 for each required tenant management role.
-
Assign the group you created in Step 1: Create a group for tenant management to the user. Users are automatically assigned the Tenant Role set by the group policy based on the group assignment. See Edit users for instructions to update a user role.
-
Confirm that the user has been assigned the correct tenant role and then click Save to save the changes to the user profile.
-
When Tenant Management is enabled, the user can log in to the tenant from the Tenants tab on their My Profile page. A user may be assigned tenant management for one more than one tenant.
-
When a user logs in to their tenant using tenant management, a new user is created at the tenant site with the prefix SP:: added to their username, for example, SP::username. This user can only manage the tenant account based on the tenant role assigned in step 4.