Multi tenancy in ACMP
General
ACMP is designed with multi tenancy and allows for the parallel operation of multiple tenants—separated from one another both organizationally and logically - within a single ACMP installation on the same Server. A tenant represents a self-contained environment for managing IT systems and can, for example, represent an entire company, a single department, an organizational unit, or a customer.
This strict separation enables a secure demarcation of data and responsibilities.
Selecting existing clients when logging in
Multi tenant elements in ACMP
In ACMP, not all functions or ACMP plugins are automatically in a state of multi tenancy. This means that some elements are either visible exclusively to the tenant administrator, or some elements can be created on a tenant-specific basis.
Note:
Non-multi tenant elements are plugins, solutions, or settings that standard ACMP users cannot view or that are generally hidden from them.
Multi-tenant elements | Non-multi-tenant elements |
ACMP Kiosk (Kiosk content/appearance) | ACMP Update |
| Clients | License Management |
| Container | Plugin „Tentants“ |
Scheduled reports | User management in System Settings |
All other plugins are global and can be viewed and used by clients who do not have a specific tenant role. However, the visibility and editability of ACMP plugins depend less on tenant affiliation and more on the role of the user or group, which is assigned by the tenant administrator.
This distinction means that in ACMP, there are two roles a user can assume:
| Tentant administrator | A tenant administrator has access to all tenants. They are authorized to create, change, and delete tenants. |
| ACMP users without administrator privileges | This user can only log in to the tenant assigned to them by the tenant administrator. They generally have access only to tenant-specific content. |
User/Group Role
It is possible to assign rights and roles to a user or an entire tenant group in ACMP.
However, only a tenant administrator can assign a user’s rights to a group or configure the visibility of various ACMP plugins for a user. This means that permissions are assigned via a checkbox to determine which plugins are displayed to the specific user and to which groups they are assigned.
These settings are configured under System > User Management.
Note:
This section is visible only to tenant administrators or users with the appropriate right.
Creating Clients and Tenant Groups
To take full advantage of multi tenancy, you must first create clients and tenant groups.
Enabling Multi Tenancy
Only after you have created these should you enable multi tenancy under System > Settings > ACMP Server > Multi Tenancy.
Clients and Containers
After activation of multi tenancy, special rules apply to containers and the clients they contain. A client can only be assigned to containers that belong to the same tenant. Global containers are an exception. Here, all clients can be assigned, regardless of their tenant affiliation. This affects both static and dynamic client assignments, as clients automatically restrict the filter conditions of dynamic containers.
If a client’s tenant changes, that client is removed from all previous containers, even if a static mapping previously existed. Here, too, the exception applies to global containers. A container’s tenant can only be freely selected at the root level. All child containers automatically inherit the tenant from the parent container, and this inheritance cannot be broken. Please note the special considerations regarding the export of containers.
When executing jobs, a cross-tenant prioritization logic applies. Jobs from global containers are always executed before jobs from tenant-specific containers, regardless of the configured priority. A special rule applies to file repositories, where containers that break the inheritance are considered first. Since a client can only ever be assigned to one tenant, prioritization between different tenants is not necessary.