Overview
A Tenant is a set of Data Planes manually grouped by any attribute. Group your Data Planes into Tenants to efficiently organize and manage integrations with your SIEM, EDR/XDR, and Data Lake. Use Tenants everywhere you deal with Data Planes to streamline the configuration process. For example, MDRs/MSSPs may find it useful to group their Data Planes by the end client.
You can manage Tenants in Platform Settings and use them in Inventory, Jobs, and Attack Detective.
The Tenants feature is not enabled by default and is included only in certain subscription plans. If this feature is not available to your organization, any Tenant selection dropdowns throughout the SOC Prime Platform will be inactive or not displayed at all.
Create a Tenant
Go to the Account > Platform Settings > Tenants and click the Add Tenant button.
Give your Tenant a meaningful name.
Provide an optional description.
Add Data Planes that will belong to this Tenant. Note that only Data Planes shared to company can be added. The dropdown shows only those Data Planes that can be added (shared and not added to another Tenant).
Select Apply.
Edit or Delete a Tenant
To edit or delete a Tenant, click the corresponding icon on the right and make edits/confirm your action.
Where to Use Tenants
TDM: Inventory. Select a Tenant before choosing a specific Data Plane.
Any Data Planes that haven't been added to a Tenant, will be displayed as belonging to the default None tenant.
If the Tenants feature is not available to your organization, the Tenants dropdown is inactive and the Data Planes dropdown includes all your Data Planes.
TDM: Jobs. Select a Tenant before choosing a specific Data Plane.
Any Data Planes that haven't been added to a Tenant, will be displayed as belonging to the default None tenant.
If the Tenants feature is not available to your organization, the Tenants dropdown is inactive and the Data Planes dropdown includes all your Data Planes.
Attack Detective: Scan Setup. Select a Tenant before choosing a specific Data Plane.
Any Data Planes that haven't been added to a Tenant, will be displayed as belonging to the default None tenant.
If the Tenants feature is not available to your organization, the Tenants dropdown is not displayed and the Data Planes dropdown includes all your Data Planes.
Attack Detective: Log Sources / Data Audit Results page. The tenant name is displayed together with the Data Plane name in the Data Plane selection dropdown.
Attack Detective: Data Audit and Content Audit Setup. Select a Tenant before choosing a specific Data Plane.
Any Data Planes that haven't been added to a Tenant, will be displayed as belonging to the default None tenant.
If the Tenants feature is not available to your organization, the Tenants dropdown is not displayed and the Data Planes dropdown includes all your Data Planes.
Attack Detective: Scan Overview and Scan Details. Select a Tenant before choosing a specific Data Plane.
Any Data Planes that haven't been added to a Tenant, will be displayed as belonging to the default None tenant.
If the Tenants feature is not available to your organization, the Tenants dropdown is not displayed and the Data Planes dropdown includes all your Data Planes.