Using subtenants¶
Environments and subtenants in "Settings"¶
Environments¶
An environment is the digital representation of a real organization. An environment contains users, data, assets and other properties.
An environment groups the users and offers them access to Insights Hub. All users within an environment have a common view of the saved data. By default, users only see the data of the assigned environment.
Subtenants¶
You can create and manage additional so-called subtenants within an environment. The subtenants can represent additional organizations or departments.
You can assign multiple users to a subtenant. Users of a subtenant only see the associated assets and data of the subtenant in the respective Insights Hub application.
You can find additional information on viewing assets and user rights of subtenants in the Asset Manager documentation (https://documentation.mindsphere.io/resources/html/assetmanager/en-US/index.html).
Assignable roles to subtenant users¶
Only specific roles are useful or even allowed for a subtenant user. To protect the administrator from misconfiguration, certain core roles are blocked for assignment to subtenant users.
This blocking works in all directions:
- Subtenant user cannot be assigned to user groups which have a not assignable role.
- Roles cannot be assigned to user groups which have subtenant users assigned.
You can assign the following roles to a subtenant user:
- mdsp:core:SubTenantUser,
- mdsp:core:fleetmanager.subtenantuser
- mdsp:core:va.subtenantusage
- mdsp:core:visualexplorer.viewer,
- mdsp:core:vfc.admin
- mdsp:core:vfc.user
- mdsp:core:vfc.viewer
Only Insights Hub core roles (mdsp:core:*) are blocked and explicitly unlocked for subtenants. All other roles are always unlocked.
Note
As administrator, you should always be careful with the assignment of users to roles and user groups.
"Subtenant" user interface¶
The following screenshot shows the "Subtenant" user interface:
① Creates a new subtenant
② List of created subtenants
③ Subtenant name and description
④ Shows the subtenant assets in Asset Manager
⑤ Opens a dialog to edit the subtenant name and description
⑥ Deletes the subtenant
⑦ Opens a dialog to edit the assignments for the selected subtenant.
Note
Operator tenants do not support the subtenant functionality
The subtenant option is not available in Operator tenants. Settings in Operator tenants do not display the tab "Subtenants".
Create new subtenant¶
Prerequisite¶
You can only create a subtenant, if you initially have generated the provider information. With the initial design of the provider information, you read confirm the provider information.
Additionally you agree with the terms and conditions associated with it. You must not enter the basic information or formulate tenant provider links necessarily to create a subtenant.
Note
Quota consumption The creation of a new subtenant reduces your quota.
Procedure¶
To create a new subtenant, proceed as follows:
- Click on "Subtenant" in the navigation.
- Click on
"Create subtenant".
- The "Create subtenant" dialog opens.
- Add a subtenant name.
- Add a description for the subtenant.
- Click "Create".
Result¶
You have created a new subtenant.
Assign users to a subtenant¶
You can assign a user to a subtenant when creating the user by choosing the user type.
Prerequisite¶
- You have created a subtenant.
- You have created a subtenant user.
Procedure¶
To assign a user to a subtenant, proceed as follows:
- In the navigation area, click "Subtenant".
- Select the desired subtenant in the selection list.
- Click "Assign users".
- The "Assign users to:
<SubtenantName>"
dialog opens. - Select the user you want to assign in the list and click "Next".
- To save the configuration, click "Save".
- In order to close the settings, click "Close".
Result¶
You assigned the user to the subtenant.
Remove user from a subtenant¶
Procedure¶
To remove a user from a subtenant, proceed as follows:
- In the navigation area, click "Subtenant".
- Select the desired subtenant in the selection list.
- Click "Assign users".
- The "Assign users to:
<SubtenantName>"
dialog opens. - Select the user you want to remove in the list "Available users".
- To remove the user of the subtenant, click .
- To save the configuration, click "Close".
Result¶
You removed the user from subtenant.