Child tenant management - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Cloud Documentation

Product
Cortex XSOAR
Version
8
Creation date
2024-03-07
Last date published
2024-09-18
Category
Administrator Guide
Solution
Cloud
Abstract

You can change the subdomain of a child tenant, change the name of a child tenant, and delete a child tenant, in the Cortex Gateway.

Manage child tenants in the Cortex Gateway

In the Cortex Gateway, you can manage all tenants, including main and child tenants, permissions, roles, and user groups.

  1. Go to the Cortex Gateway.

  2. Locate the Main Tenant and then hover over the child tenant.

  3. Select one of the following:

    • Delete

      When you delete a tenant, the selected child tenant is permanently deleted with all its data. Before deleting you are prompted to confirm that you want to delete the tenant.

    • Manage Incident Retention Licenses

      You can assign the license to the child tenant if you have purchased an incident retention license.

    Note

    You can't change the child tenant's name and the subdomain name in the Cortex Gateway.

  4. To update user permissions, roles, and user groups, click Permission Management.

    Note

    Roles, permissions, and user groups are propagated to child tenants if the roles and user groups are created in the Cortex Gateway, but not if they were created in the Main Tenant. For more information about the Cortex Gateway, see Users and Roles.

Manage tenants from the Main Tenant

After you have set up and configured Cortex XSOAR multi-tenant you can now start to manage the following:

  • Manage investigations: From the Main Tenant, you can directly access data for all child tenants if you have permissions for those tenants. The data shows in the main tenant, and you do not need to switch between tabs or screens to view data for child tenants.

  • Manage content: Add propagation labels to child tenants, remote repositories, and content, and then sync the content from the main tenant to child tenants.

  • Run a command on multiple tenants: Run a batch command on the main tenant for all child tenants.

In Cortex XSOAR, you can use the Tenant Navigator to switch directly to another tenant. The tenant navigator includes the following options:

  • Pivot to the Cortex Gateway

  • Pivot to the Customer Support Portal

  • Pivot to another tenant

    Cortex XSOAR tenants to which you have access are divided according to your CSP account. A search option is available If there are more than 5 tenants available. If there are more than 5 tenants within a specific account, a list of tenants is available for that CSP account. Tenants include child tenants and Dev/Prod.

    The tenant that you are using is marked by a green Active Session label.

Note

In the Main Tenant, you can pivot to a child tenant from specific pages, such as Incidents, and Dashboards. For example, on the Dashboards page, click Main Tenant and then click the child tenant you want to navigate to.