The enterprise administrator and the service provider administrator perform similar tasks related to user and tenant management. When an administrator for a service provider creates new authorization profiles in the BmcRealm, those profiles can be inherited only by the non-BmcRealm tenant user, whose user group is added to the created authorization profile by the BmcRealm administrator for Atrium SSO.
The following list contains tasks that are unique to the administrator for a service provider or an enterprise administrator who chooses to segment users into realms:
- Creates additional tenants in Atrium SSO
- Creates authorization profiles and roles specific to the tenant
-
Creates additional users and user groups for tenants in Atrium SSO
- Integrates tenant's LDAP server into Atrium SSO so that tenant can manage users and user groups
- Adds infrastructure components, such as TrueSight Infrastructure Management Servers and Application Management servers for the tenants
- Creates a tenant Admin user in a tenant realm other than BmcRealm
- When offboarding tenants:
- Deletes all tenant artifacts
-
Deletes tenant from Atrium SSO
- Deletes all tenant artifacts
Related topics
Service provider and tenant deployment for TrueSight Operations Management
Access control for SaaS administrators
Overview
Content Tools
Apps
Reporter Replacement
com.bmc.atlassian.bmc-util-plugin-2.section.label
Tasks