A Tenant is a set of Data Planes manually picked by any attribute. Group your Data Planes into Tenants to efficiently organize and manage integrations with your SIEMs/EDRs/Data Lakes. Use Tenants everywhere you deal with Data Planes to streamline the configuration process. For example, MDRs/MSSPs may find it useful to group their Data Planes by the end client.
You can manage Tenants in Platform Settings and use them in Inventory, Jobs, and Attack Detective.
Tenants Management Page
The Tenants page is located in Platform Settings. Here you can create, edit, and delete Tenants.
To add a Tenant:
Click the Add Tenant button.
Give your Tenant a meaningful name.
Provide an optional description.
Add Data Planes that will belong to this Tenant. Note that only Data Planes shared to company can be added. The dropdown shows only those Data Planes that can be added (shared and not added to another Tenant).
To edit or delete a Tenant, click the corresponding icon on the right.
The Tenants feature is not enabled by default and is included only in certain subscription plans. If this feature is not available to your organization, any Tenant selection dropdowns throughout the SOC Prime Platform will be inactive or not displayed at all.
Where to Use Tenants
TDM: Inventory. Select a Tenant before choosing a specific Data Plane.
Any Data Planes that haven't been added to a Tenant, will be displayed as belonging to the default None tenant.
If the Tenants feature is not available to your organization, the Tenants dropdown is inactive and the Data Planes dropdown includes all your Data Planes.
TDM: Jobs. Select a Tenant before choosing a specific Data Plane.
Any Data Planes that haven't been added to a Tenant, will be displayed as belonging to the default None tenant.
If the Tenants feature is not available to your organization, the Tenants dropdown is inactive and the Data Planes dropdown includes all your Data Planes.
Attack Detective: Investigation Setup. Select a Tenant before choosing a specific Data Plane.
Any Data Planes that haven't been added to a Tenant, will be displayed as belonging to the default None tenant.
If the Tenants feature is not available to your organization, the Tenants dropdown is not displayed and the Data Planes dropdown includes all your Data Planes.
Attack Detective: Data Audit and Choose Hunting Scenarios. You can see the tenant name appended to the Data Plane name in the Data Plane selection dropdown.
Attack Detective: Overview and Scan Details. Select a Tenant before choosing a specific Data Plane.
Any Data Planes that haven't been added to a Tenant, will be displayed as belonging to the default None tenant.
If the Tenants feature is not available to your organization, the Tenants dropdown is not displayed and the Data Planes dropdown includes all your Data Planes.