For organizations that have multiple CLP accounts for business, administrative,
legal, or other considerations, Cloud App Security deploys
separate tenants for each CLP account. Each tenant environment on the management
console can be accessed only by the corresponding CLP account and the local
administrator accounts created under the tenant.
To ease the cross-tenant security analytics and management within your organization,
Cloud App Security allows you to associate a local
administrator account with multiple Cloud App Security
tenants, so you can switch among and manage these tenants with one single account
on
the management console, without repeated logoff and logon using different
administrator accounts.
![]() |
NoteMake sure that the Cloud App Security tenants you want to
associate are in the same Cloud App Security serving
site, for the example, the US site. For more information about the Cloud App Security sites, see Data center geography.
Multi-tenant switching is also available for Trend Micro LMP customers.
|
The steps outlined below detail how to create and use an administrator account to
switch among multiple Cloud App Security tenant environments
on the management console.
Procedure
- Create an administrator account with the multi-tenant switching capability in
tenant A.
- Log on to the management console using CLP account A.
- Go to , and click Add.
- Create an administrator account, for example,
admin@example.com, and enable multi-tenant
switching. For details, see Adding an administrator account.On the Administrators screen, the status of this account under Multi-Tenant Switching is No. After it is added to another tenant, the status will change to Yes.
- Verify the administrator account or use it to log on to the management console for at least once.
- Add the administrator account in tenant B.
- Log on to the management console using CLP account B.
- Go to , and click Add.
- Type the email address admin@example.com of the
administrator account in the Email Address text
box, and select the Allow the
administrator to switch among Cloud App Security tenants of your
organization from the management console. check box.SSO to Console and Role change to Inherited. This administrator shares the same settings as configured in the tenant, for example, tenant A in this section, where it was created. The settings are not editable in the current tenant. You can go to tenant A to view and modify the settings for this administrator.
- Specify a user name in the Name text box.
- Click Save.The administrator account is successfully added and displayed on the Administrators screen in the current tenant.
- Repeat step 2 to add the administrator account in tenant C.
- Log on to the management console using this newly-added administrator
account.The Dashboard screen of tenant A the appears.
- Hover over the account name in the upper right corner and then click
after the tenant name.
The tenant list with the respective CLP account name appears, with tenant A selected. The tenant where the administrator account was created always displays at the top.Note
If you are unable to switch tenant, it indicates that you do not have the permission to manage all organizations. Contact your administrator to grant the permission under the tenant where your account was created. - Select the tenant you want to switch to.The Dashboard screen of the selected tenant appears.
- (Optional) Delete the administrator account.
Note
This administrator account can be removed from where it was created (tenant A in this procedure) only after it is removed from all the associated tenants (tenants B and C in this procedure).- Go to the tenant that you do not allow to switch to, and remove the
account from the tenant.The tenant disappears from the list for switching tenants.
- Repeat step 7a to remove the account from all the associated
tenants.Only the tenant where the account was created (tenant A in this procedure) appears in the list for switching tenants.
- Log on to the management console of tenant A using either CLP account A or another account, and then remove the administrator account.
- Go to the tenant that you do not allow to switch to, and remove the
account from the tenant.