Managing tenant access

Multitenancy support enables service providers to offer BMC Application Diagnostics to their customers as a software-as-a-service (SaaS) offering. Service providers can isolate data groups and control data visibility and permissions for each customer, called a tenant or tenant organization.

To enable multiple tenants, first a user with Administrator-level access (or higher) creates tenant organizations. To each tenant organization, you assign a specific tenant user, called an Access Manager. The tenant Access Manager creates additional tenant user accounts, including Observers, Application Owners, and more Access Managers. Finally, Administrator-level user (or higher) associates each tenant organization with BMC Application Diagnostics Portal.

This topic introduces the following topics:

Tenant users

Tenant organizations have the following types of users:

  • Tenant Observers, that is, tenant end users, can see the BMC Application Diagnostics data in the BMC Application Performance Management Console. Observers are usually operators, application support employees, or application developers, who are looking for transaction tracing information or diagnostics data. Observers can only see their own data, including application servers and monitored applications.
  • Tenant Application Owners can see the BMC Application Diagnostics data in the BMC Application Performance Management Console, and have permission to configure their tenant's relevant settings.
  • Tenant Access Managers have permission to add, configure, and remove tenant Observers, Application Owners, and additional Access Managers. Every tenant organization must have at least one tenant Access Manager. Access Managers can only access their own tenant user configuration.

Tenant users are not system roles. These are special roles for BMC Application Performance Management as a Service.

Tenant configuration overview

The Administrator user (or higher) sets up a tenant account, creates an Access Manager for the tenant, and configures a BMC Application Diagnostics Portal for the tenant.

To set up tenants and tenant users requires the following general steps. For details and instructions about configuring tenants and users, see Managing tenant access in BMC Real End User Experience Monitoring. For instructions that are specific to the BMC Application Diagnostics configuration, follow the hyperlink in the general steps.

Each step is preceded with the minimum permissions for the user who performs the operation.

  1. Administrator: Create a tenant for an organization.
    1. From the System Access tab, go to the Tenant Management page.
    2. From the Actions menu, select Add Tenant.
    3. Enter the required information and click Save.
  1. Administrator: Add at least one Access Manager to the tenant.
    1. On the Tenant Management page, click the arrow on the row and select Add Access Manager.
    2. Enter the required information and click Save.
  2. Access Manager: Create accounts for Observers, Application Owners, and Access Managers.
    1. From the System Access tab, go to the Accounts page.
    2. From the Actions menu, select Add Tenant.
    3. Enter the required information, including the account role, and click Save. 
  3. Administrator: Configure the tenant for BMC Application Diagnostics by associating a BMC Application Diagnostics Portal with the tenant.

After configuration, tenant users can log on to their tenant instance of the SaaS product.

Related topics

End-to-end-processes

For more information about configuring tenants, user roles, and tenant access, see the following topics:


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*