Multitenancy
This feature is only available with the Enterprise edition.
Tenant Settings
Cross Tenant Options
The user-role-tenant model in Pyramid uses the classic multi-tenant approach: users, content and data within a tenancy cannot be accessed by other users in another tenancy. However, this can be altered with "Cross Tenancy" options.
- To lean more about cross tenant content, click here.
Cross Tenant Content
This setting allows Enterprise Admins to assign public content to users from different tenants.
Check the option to 'Enable cross tenant content,' and click Apply to save changes.
Cross Tenant Roles
Allows Enterprise and Domain Admins to assign users from different tenants to roles in another tenant, enabling Admins to grant specified users access to content from multiple (or all) tenants.
Check the option to 'Enable cross tenant user roles,' and click Apply to save changes. Once cross tenant user roles have been enabled, Admins will have the ability to assign multiple roles from different tenants to users in different tenants from the Roles panel.
- For more information about roles, and assigning multitenant roles, click here.
Cross Tenant Content vs Cross Tenant Roles
Cross tenant content is useful for having the same content seen and accessible by different tenants without having to create duplicates. It works by explicitly adding multitenant roles to content or folders and can only be set and managed by ENTERPRISE admins.
Cross tenant roles, on the other hand, delivers similar functionality to cross tenant content, by allowing users to join roles outside of their own tenant - but the settings are attached to the role, rather than the content. As such, it can be extended to data security and any future content and it allows DOMAIN admins to add and remove users, from outside their domain / tenancy, to existing roles without Enterprise admins. This is useful for on-going management of common content and data elements in a deployment at the domain level.
Folder Creation
You can also opt to disable folder creation at the top level of the public content domain, in order to more easily govern folder creation.
Write Capability
Select 'Disable write capability privileges for non enterprise user' to disable the ability of users and domain admins to create new databases on the server. Only the enterprise admin will be able to create new databases on the server if this option is selected.