Advanced multitenancy features

The advanced multitenancy features can be used to set up delegated tenant administration and content sharing among tenants.

A Cognos user can have a single tenant ID that is associated with the Tenant ID Mapping property. If the Tenant ID Mapping property is defined, additional tenant IDs can be assigned to a Cognos user by using the Tenant Bounding Set Mapping property.

Content Manager objects can have a virtual tenant ID, which can contain multiple tenant IDs, assigned as their tenant ID. This allows users from multiple tenants to access common content, such as folders or reports.

Virtual tenant IDs for Content Manager objects and multiple tenant IDs that are implemented for users by using the Tenant ID Mapping and Tenant Bounding Set Mapping properties can be used at the same time. These features can be used to allow Tenant Administrators to administer multiple tenants, which is referred to as delegated tenant administration; or Cognos users to access Content Manager objects for multiple tenants, which is referred to as content sharing among tenants.

When delegated tenant administration is implemented, the system administrator can delegate certain tasks, such as administration of security, schedules, activities, and events for some tenants to members of the Tenant Administrators role. The tenant administrators can administer a set of tenants, as defined by the tenant administrator's bounding set, in addition to their own tenant. The system administrator retains full control over the permissions of the tenant administrators. For more information, see Delegated tenant administration.

When content sharing among tenants is implemented, users can access content from different tenants, in addition to the users' own tenant content. Content sharing for users can be achieved by using the following multitenancy features:

• The Tenant Bounding Set Mapping property.

  A user can access any Content Manager object whose tenant ID is included in the user's tenant bounding set.

• Virtual tenant IDs

  A Content Manager object that has the virtual tenant ID assigned can be accessed by users from any tenant whose tenant ID is included in the object virtual tenant ID.

For more information, see the topic Setting up virtual tenants to enable content sharing among tenants.