Activate the Main Tenant - Multi-Tenant Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Multi-Tenant Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-09-18
Last date published
2024-10-21
Category
Multi-Tenant Guide
Solution
Cloud
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation
Abstract

Learn how to activate Cortex XSOAR from the Cortex Gateway.

To set up Cortex XSOAR Multi-Tenant, you need to activate the main tenant in the Cortex Gateway.

The Cortex Gateway displays tenants Available for Activation and Available Tenants. From the Cortex Gateway, you can view and manage existing tenants and activate additional tenants. For more information, see Activate the Tenant.

After activating the main tenant, you can create child tenants according to your license. From the main tenant, you can see all incidents and indicators across all tenants, create integrations and scripts for use across multiple child tenants, run commands across multiple child tenants, etc.

Note

To create a child tenant, ensure that you have Account Admin permissions.

Activating a main tenant is a one-time task you’ll need to perform before using Cortex XSOAR. After activation, you need to add child tenants for activation.

  1. To start the activation process, go to the activation link you received in an email and sign in to the Cortex Gateway.

    Note

    To activate a tenant, ensure that you have one of the following roles assigned:

    • CSP role

      You must have the Super User role in your existing CSP administrator accounts. This role cannot be removed or changed through the Cortex Gateway.

    • Cortex role

      You must have the Account Admin role.

      As a first user with CSP Super User permissions to access the Cortex Gateway, you are automatically granted Account Admin permissions to the Cortex Gateway. You can also add Account Admin users as required.

      With these role permissions, you can activate Cortex XSOAR tenants, create new roles, and assign permissions to users allocated to your tenant.

  2. In the Available for Activation section, locate the tenant you want to activate according to the serial number and Activate to launch the Tenant Activation wizard.

    Note

    Once activated, the tenant is associated with the account and cannot be moved.

  3. Define the following tenant details:

    • Tenant Name: Give the Cortex XSOAR tenant an easily-recognizable name.

      Choose a name that is 59 or fewer characters and is unique across your company account.

    • Region: Select the region in which you want to set up the Cortex XSOAR tenant.

    • Tenant Subdomain: Give your Cortex XSOAR instance an easy to recognize name that is used to access the tenant directly using the full URL.

      (https://<subdomain>.crtx.<region>.paloaltonetworks.com).

      Note

      Note this is a public FQDN, so be careful with sensitive information such as the company name.

    • Review and agree to the terms and conditions of the Privacy policy, Term of Use, EULA.

  4. Activate your tenant.

    Activation can take up to an hour. You should receive a notification by email that the tenant has completed the activation process.

  5. Select Back to main gateway and in the Available Tenant section, search for your tenant name. Hover over a tenant to display the Tenant Status and License Details. When the tenant displays an Active status, select the tenant name to confirm you can successfully access the Cortex XSOAR tenant.

    Note

    • The first tenant created is labeled as the Main Account in the Cortex Gateway. Child tenants are not labeled.

    • You can change your tenant subdomain from oldName.xsoar.us.paloaltonetworks.com to newName.xsoar.us.paloaltonetworks.com at any time, if you have Account Admin or Instance Admin permissions. To change your tenant subdomain name, contact Customer Support.