Create child tenants in the Cortex Gateway.
After you have set up the main account, you can set up child tenants in Cortex Gateway. You can create as many child tenants as you require, subject to your license.
Note
The main account is labeled in Cortex Gateway, but child tenants are not labeled.
All child tenants inherit the region from the main account.
To create a child tenant, ensure that you have Account Admin permissions.
In Cortex Gateway, you can view all the available tenants. If you want to create more child tenants than your license permits, contact Customer Support.
In the Cortex Gateway, hover over the main account you activated previously until the three-dot menu appears and click Add Child Tenant.
Add the following details:
Parameter
Description
Child Tenant Name
Give the Cortex XSIAM tenant an easily recognizable name.
Choose a name that is 59 or fewer characters and is unique across your company account.
Note
After activating a child tenant, you can't change the child tenant's name.
Region
View the region for the child tenant. The region is inherited from the main account.
Child Tenant Subdomain
Give your Cortex XSIAM instance an easy-to-recognize name that is used to access the tenant directly using the full URL.
https://<subdomain>.crtx.<region>.paloaltonetworks.com
Note
This is a public FQDN, so be careful with sensitive information such as the company name.
After activating a child tenant, you can only change the child tenant subdomain once.
Child Units Allocation
Assign the number of employees and Gigabytes you want to allocate to this child tenant. The amount used and the total amount available to this multi-tenant environment are displayed.
Note
Ensure that you meet the minimum requirements for child tenant allocation.
Add Ons
If any license add-ons were purchased with your multi-tenant license, they are listed here. If you acquired compute units (CU) or forensics, you can allocate how many units to allocate to this child tenant.
Confirm approval of the terms and conditions of the privacy policy and click Activate.
Activation can take up to an hour. You should receive notification by email that the child tenant has completed the activation process.
(Optional) Add another child tenant by repeating steps 1 and 2 or access your newly created tenant.
In the Cortex Gateway, under your main account, you can see the total number of tenants you are licensed for and how many you have created.
Note
If you reach your limit for child tenants, depending on your license, you may be able to create more tenants. You may be charged for additional tenants. Contact Customer Support if you are approaching your authorized limit.
Child tenant minimum allocations
The following are the minimum number of endpoints , employees and Gigabytes needed in a child tenant. You will not be able to create a child tenant with less than these minimum allocations, nor will you be able to edit your child tenant allocations to have less than these minimum allocations.
Multi-tenant environment | Child tenant minimum allocation |
---|---|
MSSP multi-tenant | 100 employees AND 50 Gigabytes. |
Enterprise multi-tenant | 100 employees AND 50 Gigabytes. |