Many of you who manage multiple tenants in Securonix have consistently provided valuable feedback on a recurring challenge: assigning tenant access one user at a time does not scale.
Every new tenant requires administrators to revisit each analyst who needs access. For service providers onboarding tenants in batches, this can mean hours of repetitive administration, while increasing the risk that access becomes incorrect, excessive, or remains in place long after it is needed.
Group-based tenant access is coming soon to address this challenge.
What changes
Today, a group's tenant list defines which tenants are permitted to use that group. It does not grant tenant access to the users who belong to it. Tenant access must still be assigned individually.
With this change, group membership will grant tenant access directly.
A user's effective tenant access will become the combination of:
- tenants associated with the groups they belong to, and
- any tenants assigned directly to the user.
Add an analyst to a group scoped to five tenants, and they will have access to all five. Remove them from that group, and they will lose the access provided through it, while retaining any access assigned directly or inherited through other groups.
The result is straightforward: onboarding a new tenant no longer needs to be a user-by-user exercise.
Availability
The capability is built and is now completing verification across the dependent platform components. Because this changes how tenant access is resolved, we want to ensure the behavior is correct and consistent across the platform before making it available.
We will confirm availability here once verification is complete, and the capability will also be covered in the relevant release documentation.
Tell us how you are planning for this
If you are preparing for this change, we would like to hear how you are structuring your groups and what would make the transition easier for your organization.
Reply to this thread or raise it with your TAM.
Best,
The Securonix Team