Tenant Management
Tenant Management is the system-level page where platform administrators provision and maintain tenant organizations. Each tenant is an isolated workspace with its own users, data, micro-services, and configuration. System administrators use this page to create tenants, adjust subscription limits, manage OAuth providers, and review health metrics.
Accessing the Page
Section titled “Accessing the Page”- Route:
/tenants - Menu Path: Settings → System → Tenant Management
- Primary audience: System administrators only. These pages are accessed via the system admin login at
system.portal.net— not the tenant portal.
What you can do here
Section titled “What you can do here”- View all tenant organizations with their name, subdomain, status, contact, and creation date.
- Create a new tenant with its core identity, subscription tier, and initial status.
- View the full tenant detail page including health metrics, micro-service access, OAuth providers, branding, and billing.
- Edit tenant settings such as subscription limits, authentication policy, data mode, and external accounts configuration.
- Delete a tenant (soft delete — recoverable via Show Deleted toggle).
- Filter tenants by status and subscription tier; search by name or subdomain.
Common tasks
Section titled “Common tasks”- Open Settings → System → Tenant Management at
system.portal.net. - Use the Search field or status filter to locate the target tenant.
- Click the View action on a row to open the full tenant detail page.
- From the detail page, click Edit Settings to update subscription limits or configuration.
- To create a new tenant, click Create Tenant in the page header and fill in the required fields.
- Save changes and verify the tenant appears with the expected status and subdomain.
- The subdomain is set at creation and cannot be changed after saving. Choose it carefully — it forms the tenant’s URL (e.g.,
acme.portal.net). - System tenants are marked with a shield icon and cannot be deleted or deactivated. They are used for platform administration.
- Soft-deleted tenants are hidden from the list by default. Toggle Show Deleted to see and restore them.
- Changing a tenant’s Data Mode from Standalone to Managed downgrades portal users’ permissions on ERP-managed data categories to read-only. This cannot be reversed automatically.
- Tenant status affects user access: only Active tenants allow full user login.
- The per-tenant Micro-Service Access tab on the tenant detail page is hidden when System Settings → Microservice Access Mode is set to All active services for all tenants. In that mode every active microservice is exposed to every tenant automatically and the per-tenant grant table is bypassed.
Creating a Tenant
Section titled “Creating a Tenant”Click Create Tenant in the page header. A full-page form opens with multiple sections for identity, subscription, and settings.
Fields
Section titled “Fields”| Field | Required | Type | Description | Default | Validation |
|---|---|---|---|---|---|
| Tenant Name | Yes | Text | Display name for the tenant organization | — | 2–100 characters |
| Subdomain | Yes | Text | Unique subdomain identifier for the tenant URL | — | Lowercase letters, numbers, and hyphens only; 2–63 characters; availability checked in real time |
| Initial Status | No | Select | Activation status at creation: Active, Demo, Suspended, Disabled, Cancelled | Active | — |
| Demo Duration (Days) | No | Number | Number of days before a Demo tenant expires (only shown when Initial Status is Demo) | 30 | 1–365 |
| Contact Name | No | Text | Primary contact person for the tenant | — | — |
| Contact Email | No | Primary contact email address | — | Valid email format | |
| Subscription Tier | No | Select | Plan tier: Free, Basic, Professional, Enterprise | — | — |
| Maximum Users | No | Number | Maximum number of portal users allowed | — | 1–10,000 |
| Maximum Micro-Services | No | Number | Maximum number of micro-services the tenant can enable | — | 0–100 |
| Subscription Expires | No | Date | Subscription expiration date; leave empty for no expiration | — | Must be a future date |
| Allow Local Login | No | Toggle | Enable username/password login in addition to OAuth | Off | — |
| Require Email Verification | No | Toggle | Require users to verify their email address on first login | Off | — |
| Tenant is Active | No | Toggle | Controls whether the tenant is active and accessible | On | — |
| Data Mode | No | Select | Standalone (locally managed data) or Managed (ERP-driven, read-only for portal users) | Standalone | — |
| Enable External Accounts | No | Toggle | Allow customer accounts to access the B2B portal | Off | — |
| Account Linking Mode | No | Select | Standalone (independent) or Linked to Business Partners (uses BP API addresses) | Standalone | Visible only when External Accounts is enabled |
| Country | No | Select | Primary country for tax calculation | — | — |
| Billing Contact Name | No | Text | Name used on invoices | — | — |
| Billing Contact Email | No | Email for billing correspondence | — | Valid email format | |
| Branding Configuration (JSON) | No | Textarea | Optional JSON with custom colors, logo URLs, and app title | — | Valid JSON format |
Steps:
- Click Create Tenant in the page header.
- Fill in Tenant Name and Subdomain. A real-time availability check confirms the subdomain is free.
- Optionally set Initial Status — choose Demo and enter a Demo Duration if this is a trial tenant.
- Fill in contact details: Contact Name and Contact Email.
- Configure Subscription & Limits: select a subscription tier, set maximum users and micro-services, and optionally set an expiration date.
- Configure Tenant Settings: enable local login, email verification, or toggle the active state.
- Optionally set Data Mode, external accounts, and billing information.
- Click Create. The system navigates to the new tenant’s detail page.
Editing a Tenant
Section titled “Editing a Tenant”Open row actions on a tenant and select View to open the tenant detail page, then click Edit Settings to update the configuration. Alternatively, click directly on the tenant name to view the detail page.
Edit Tenant Settings opens the same form as Create Tenant pre-filled with the tenant’s current values, with Subdomain read-only.
Same fields as Creating, with the following differences:
- Subdomain is read-only after creation and cannot be changed.
- Initial Status is replaced by the Status and Tenant is Active controls.
- All other fields are editable.
The Configuration card also exposes a Strict User Mode toggle:
| Field | Required | Type | Description | Default | Validation |
|---|---|---|---|---|---|
| Strict User Mode | No | Toggle | When enabled, SSO logins reject unknown users unless they have a pending invitation. Recommended. | Off (Editable). Force-locked On and disabled for the system tenant — the dialog shows “Always enforced for the system tenant” beneath the label. | — |
Deleting a Tenant
Section titled “Deleting a Tenant”Open row actions on a tenant row and select Delete. System tenants cannot be deleted and will not show the Delete action.
- Open row actions (three-dot menu) on the target tenant row.
- Select Delete.
- Read the confirmation: “Are you sure you want to delete [name]? The tenant will be deactivated and hidden from the list. You can restore it later by toggling Show Deleted.”
- Click Delete Tenant to confirm — the tenant is soft-deleted and removed from the default list view.
To restore a deleted tenant:
- Enable the Show Deleted toggle in the filter bar.
- Locate the tenant in the list.
- Open row actions and select Restore.
Note: System tenants (marked with a shield icon) cannot be deleted. The Delete action is hidden for those rows.
Related Pages
Section titled “Related Pages”- Service API Keys — platform-level API keys for service-to-service authentication
- AI Model Pricing — per-model pricing used in tenant AI budget calculations