Skip to main content

Multitenancy

You can use multitenancy to create hierarchies in your Spot organizations. You can set up your child orgs to use role-based access control (RBAC). Admins for your parent orgs can have admin rights for the child orgs.

Multitenancy is useful for managed service providers (MSP) and resellers. It lets you configure your child orgs at the parent level. You can then give your customers access to the child orgs.

Some of the benefits of multitenancy include:

  • Simplification of complex, multi-customer structures
  • Organization Admin privileges granted to parent org administrators
  • Admins for the parent org can control the subaccounts and cost data types admins for the child org can see

Keep in mind, you can only create a user once for each org and all its child orgs.

image

An organization hierarchy includes:

  • A parent organization (L1)

    If you have permission to view the parent org, you can see a yellow star next to the name of the parent org.

    image

    New roles for the parent organization:

    • Organization Admin has access to the child organization page and write permissions for user management.

    • Organization Editor has Organization Admin permissions for the parent org only. Doesn’t have access to the child organization page.

  • Child organizations (L2)

    You can see a list of all the child orgs under the parent. You can also see the number of accounts and total users for each child org.

    1. In the Spot console, click the user icon user icon > Settings.
    2. Make sure you’re in the parent org.
    3. Click Organization > Child Organizations.
    4. Switch to any of the orgs by hovering the child org in the list and clicking Switch switch icon.
    child org name image

    From the list of child orgs, click the Total Users number to go to the Users page. The Users page shows the users for that child org.

Create a Child Organization​

  1. In the Spot console, click the user icon user icon > Settings.

  2. Make sure you’re in the parent org.

  3. Click Organization> Child Organizations > Add Organization.

  4. Enter a Name and click Create.

  5. Click Product Access product access icon for the new child org and select the Spot products for this child org. You can set the default products.

  6. Switch to the new child org.

  7. Connect the child org to a cloud service provider.

  8. Set up users, groups, and permission policies.

    note

    You can only create a user once for each org and all its child orgs.

Remove a User from an Org​

If you remove a user from an org, it doesn’t delete the user from the Spot console. If the user has permanent tokens used for APIs, those APIs will no longer work. You cannot remove a user from an org if that user is the only Organization Admin.

You can remove a user from an org:

  1. In the Spot console, click the user icon user icon > Settings.
  2. Go to the org you want to remove the users from.
  3. Click the Total Users number to go to the Users page.
  4. Select the user you want to remove and click Delete User.

Set Default Spot Product Access for New Child Orgs​

  1. In the Spot console, click the user icon user icon > Settings.
  2. Click Organization > General Details > Default Spot Product Access for New Child Organizations.
  3. Click Configure Access, select the Spot products, and click Update.