Multitenancy enables you to isolate data, with only one instance of Orchestrator. This feature facilitates automating different departments from your company and ensures the desired authorization of Orchestrator data per department.
The following Orchestrator components are separated by tenants:
- Settings (including licenses)
- Organization Units (if enabled)
Multitenancy is enabled by default. To change this, set the
Tenant.Registration.Enabled parameter to
While installing Orchestrator, a default host admin, which is also known as a System Administrator, is created. The host admin has rights to create new tenants, change application settings and audit change password, create, update, register, and delete actions on settings, tenants, and users. The Profile page enables host admins to change their general information and password, as well as view the last login attempts with these credentials.
The Default tenant is also automatically created when installing Orchestrator, as your first tenant. Each tenant has a tenant admin, created as a local user, and has the Administrator role. The tenant admin cannot be deleted or disabled, but you can edit its information in the Users page.
A tenant can be enabled or disabled at any point, in the Tenants page, by the System Admin.
If you are logged in with a tenant different than the default one, its name is displayed in the User menu, along with the username, next to the Alerts notification icon.