Multitenancy enables you to isolate data, with only one instance of Orchestrator. This feature facilitates automating different departments from your company and ensures the desired authorization of Orchestrator data per department. However, please note that all the data is stored in the same database.
The following Orchestrator components are separated by tenants:
- Settings (including licenses)
- Organization Units (if enabled)
Multitenancy is enabled by default and cannot be disabled. The Become a tenant option in the login page is disabled. To display this option, select the Enable tenant registration check box in the host Settings page.
While installing Orchestrator, a default host admin, which is also known as a System Administrator, is created. The host admin has rights to create new tenants, change application settings and audit change password, create, update, register, and delete actions on settings, tenants, and users. The Profile page enables host admins to change their general information and password, as well as view the last login attempts with these credentials.
The Default tenant is also automatically created when installing Orchestrator, as your first tenant. Each tenant has a tenant admin, created as a local user, and has the Administrator role. The tenant admin cannot be deleted or disabled, but you can edit its information in the Users page.
A tenant can be enabled or disabled at any point, in the Tenants page, by the System Admin.
If you are logged in with a tenant different than the default one, its name is displayed in the User menu, along with the username, next to the Alerts notification icon.