Multi tenancy in ACMP

= General =

ACMP is designed with multi tenancy and allows for the parallel operation of multiple tenants—separated from one another both organizationally and logically - within a single ACMP installation on the same Server. A tenant represents a self-contained environment for managing IT systems and can, for example, represent an entire company, a single department, an organizational unit, or a customer.

6

7

This strict separation enables a secure demarcation of data and responsibilities.

8

9

[[Selecting existing clients when logging in>>image:Mandantenfähigkeit_allgemein.png]]

10

11

= **Multi tenant elements in ACMP** =

12

13

In ACMP, not all functions or ACMP plugins are automatically in a state of multi tenancy. This means that some elements are either visible exclusively to the tenant administrator, or some elements can be created on a tenant-specific basis.

14

15

16

Non-multi tenant elements are plugins, solutions, or settings that standard ACMP users cannot view or that are generally hidden from them.

17

18

19

|(% style="width:583px" %)(((

20

**Multi-tenant elements**

21

)))|(% style="width:1109px" %)(((

22

**Non-multi-tenant elements**

23

)))

24

|(% style="width:583px" %)(((

25

ACMP Kiosk (Kiosk content/appearance)

26

)))|(% style="width:1109px" %)ACMP Update

27

|(% style="width:583px" %)Clients|(% style="width:1109px" %)(((

28

License Management

29

)))

30

|(% style="width:583px" %)Container|(% style="width:1109px" %)Plugin „Tentants“

31

|(% style="width:583px" %)(((

32

Scheduled reports

33

)))|(% style="width:1109px" %)(((

34

User management in System Settings

35

)))

36

|(% style="width:583px" %) |(% style="width:1109px" %)Asset Management

37

|(% style="width:583px" %) |(% style="width:1109px" %)Helpdesk

38

|(% style="width:583px" %) |(% style="width:1109px" %)Windows Update Management

39

40

All other plugins are global and can be viewed and used by clients who do not have a specific tenant role. However, the visibility and editability of ACMP plugins depend less on tenant affiliation and more on the role of the user or group, which is assigned by the tenant administrator.

41

This distinction means that in ACMP, there are two roles a user can assume:

42

43

|Tentant administrator|(((

44

A tenant administrator has access to all tenants. They are authorized to create, change, and delete tenants.

45

They can also view all plugins, whether global or client-specific.

46

They are able to assign rights to other users.

47

)))

48

|ACMP users without administrator privileges|This user can only log in to the tenant assigned to them by the tenant administrator. They generally have access only to tenant-specific content.

49

50

= **User/Group Role** =

51

52

It is possible to assign rights and roles to a user or an entire tenant group in ACMP.

53

54

However, only a tenant administrator can assign a user’s rights to a group or configure the visibility of various ACMP plugins for a user. This means that permissions are assigned via a checkbox to determine which plugins are displayed to the specific user and to which groups they are assigned.

55

56

These settings are configured under //System > User Management//.

57

58

59

This section is visible only to tenant administrators or users with the appropriate right.

60

61

62

= Creating Clients and Tenant Groups =

63

64

To take full advantage of multi tenancy, you must first create [[clients and tenant groups>>doc:ACMP.610.ACMP-Solutions.System.Mandanten.WebHome]].

65

66

= Enabling Multi Tenancy =

67

68

Only after you have created these should you enable [[multi tenancy>>doc:ACMP.610.ACMP-Solutions.System.Einstellungen.ACMP Server.WebHome||anchor="HMandantenfE4higkeit"]] under //System > Settings > ACMP Server > Multi Tenancy//.

69

70

= **Clients and Containers** =

71

72

After activation of multi tenancy, special rules apply to containers and the clients they contain. A client can only be assigned to containers that belong to the same tenant. Global containers are an exception. Here, all clients can be assigned, regardless of their tenant affiliation. This affects both static and dynamic client assignments, as clients automatically restrict the filter conditions of dynamic containers.

73

74

If a client’s tenant changes, that client is removed from all previous containers, even if a static mapping previously existed. Here, too, the exception applies to global containers. A container’s tenant can only be freely selected at the root level. All child containers automatically inherit the tenant from the parent container, and this inheritance cannot be broken. Please note the special considerations regarding the [[export of containers>>doc:ACMP.610.ACMP-Solutions.Client-Management.Container.Container verwalten.Container importieren und exportieren.WebHome||anchor="HExportundImportbeiMandantenfE4higkeit"]].

75

76

When executing jobs, a cross-tenant prioritization logic applies. Jobs from global containers are always executed before jobs from tenant-specific containers, regardless of the configured priority. A special rule applies to file repositories, where containers that break the inheritance are considered first. Since a client can only ever be assigned to one tenant, prioritization between different tenants is not necessary.

Wiki source code of Mandantenfähigkeit in ACMP

Navigation

author	version	line-number	content
		1	{{aagon.floatingbox/}}
		2
		3	= General =
		4
		5	ACMP is designed with multi tenancy and allows for the parallel operation of multiple tenants—separated from one another both organizationally and logically - within a single ACMP installation on the same Server. A tenant represents a self-contained environment for managing IT systems and can, for example, represent an entire company, a single department, an organizational unit, or a customer.
		6
		7	This strict separation enables a secure demarcation of data and responsibilities.
		8
		9	[[Selecting existing clients when logging in>>image:Mandantenfähigkeit_allgemein.png]]
		10
		11	= Multi tenant elements in ACMP =
		12
		13	In ACMP, not all functions or ACMP plugins are automatically in a state of multi tenancy. This means that some elements are either visible exclusively to the tenant administrator, or some elements can be created on a tenant-specific basis.
		14
		15	{{aagon.infobox}}
		16	Non-multi tenant elements are plugins, solutions, or settings that standard ACMP users cannot view or that are generally hidden from them.
		17	{{/aagon.infobox}}
		18
		19	\|(% style="width:583px" %)(((
		20	Multi-tenant elements
		21	)))\|(% style="width:1109px" %)(((
		22	Non-multi-tenant elements
		23	)))
		24	\|(% style="width:583px" %)(((
		25	ACMP Kiosk (Kiosk content/appearance)
		26	)))\|(% style="width:1109px" %)ACMP Update
		27	\|(% style="width:583px" %)Clients\|(% style="width:1109px" %)(((
		28	License Management
		29	)))
		30	\|(% style="width:583px" %)Container\|(% style="width:1109px" %)Plugin „Tentants“
		31	\|(% style="width:583px" %)(((
		32	Scheduled reports
		33	)))\|(% style="width:1109px" %)(((
		34	User management in System Settings
		35	)))
		36	\|(% style="width:583px" %) \|(% style="width:1109px" %)Asset Management
		37	\|(% style="width:583px" %) \|(% style="width:1109px" %)Helpdesk
		38	\|(% style="width:583px" %) \|(% style="width:1109px" %)Windows Update Management
		39
		40	All other plugins are global and can be viewed and used by clients who do not have a specific tenant role. However, the visibility and editability of ACMP plugins depend less on tenant affiliation and more on the role of the user or group, which is assigned by the tenant administrator.
		41	This distinction means that in ACMP, there are two roles a user can assume:
		42
		43	\|Tentant administrator\|(((
		44	A tenant administrator has access to all tenants. They are authorized to create, change, and delete tenants.
		45	They can also view all plugins, whether global or client-specific.
		46	They are able to assign rights to other users.
		47	)))
		48	\|ACMP users without administrator privileges\|This user can only log in to the tenant assigned to them by the tenant administrator. They generally have access only to tenant-specific content.
		49
		50	= User/Group Role =
		51
		52	It is possible to assign rights and roles to a user or an entire tenant group in ACMP.
		53
		54	However, only a tenant administrator can assign a user’s rights to a group or configure the visibility of various ACMP plugins for a user. This means that permissions are assigned via a checkbox to determine which plugins are displayed to the specific user and to which groups they are assigned.
		55
		56	These settings are configured under //System > User Management//.
		57
		58	{{aagon.infobox}}
		59	This section is visible only to tenant administrators or users with the appropriate right.
		60	{{/aagon.infobox}}
		61
		62	= Creating Clients and Tenant Groups =
		63
		64	To take full advantage of multi tenancy, you must first create [[clients and tenant groups>>doc:ACMP.610.ACMP-Solutions.System.Mandanten.WebHome]].
		65
		66	= Enabling Multi Tenancy =
		67
		68	Only after you have created these should you enable [[multi tenancy>>doc:ACMP.610.ACMP-Solutions.System.Einstellungen.ACMP Server.WebHome\|\|anchor="HMandantenfE4higkeit"]] under //System > Settings > ACMP Server > Multi Tenancy//.
		69
		70	= Clients and Containers =
		71
		72	After activation of multi tenancy, special rules apply to containers and the clients they contain. A client can only be assigned to containers that belong to the same tenant. Global containers are an exception. Here, all clients can be assigned, regardless of their tenant affiliation. This affects both static and dynamic client assignments, as clients automatically restrict the filter conditions of dynamic containers.
		73
		74	If a client’s tenant changes, that client is removed from all previous containers, even if a static mapping previously existed. Here, too, the exception applies to global containers. A container’s tenant can only be freely selected at the root level. All child containers automatically inherit the tenant from the parent container, and this inheritance cannot be broken. Please note the special considerations regarding the [[export of containers>>doc:ACMP.610.ACMP-Solutions.Client-Management.Container.Container verwalten.Container importieren und exportieren.WebHome\|\|anchor="HExportundImportbeiMandantenfE4higkeit"]].
		75
		76	When executing jobs, a cross-tenant prioritization logic applies. Jobs from global containers are always executed before jobs from tenant-specific containers, regardless of the configured priority. A special rule applies to file repositories, where containers that break the inheritance are considered first. Since a client can only ever be assigned to one tenant, prioritization between different tenants is not necessary.