Block and Unblock a Tenant - Multi-Tenant Guide - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Multi-Tenant Guide

Product
Cortex XSOAR
Version
6.5
Creation date
2022-09-29
Last date published
2023-02-09
End_of_Life
EoL
Category
Multi-Tenant Guide

In the Accounts Management tab, when clicking on the cog wheel next to the tenant, you can block the tenant’s account.

When you block an account, it blocks the account at proxy level (from the main server) but you can still access the tenant account via the port. You can take various actions such as edit, stop, delete, and unblock the account in the Account Management tab. The account process still runs.

A typical use case for blocking an account is when a tenant experiences an issue that affects the rest of the system. For example, if a tenant is operating at suboptimal speed and efficiency due to an indexing issue, you can block the tenant so that the rest of the system is unaffected and continues to run as expected. After you block a tenant, you can still access it via the port, fix the problem, and then unblock the tenant.

Alternatively, you can Stop and Start a Tenant account without deleting it from the database. You cannot access the account via the port, when the account is stopped. You can take various actions such as edit, start and delete the account in the Account Management tab. If you no longer require the account, you can delete the account from the database.