Tenants

The Tenants page is where the instance operator creates and manages the customer tenants on a multi-tenant UTMStack v12 server. This page describes everything on it. For what a tenant is and what it owns, see Multi-Tenancy Overview; for the whole process of bringing a customer on board, see Onboarding a Customer.

Requirements

A licence with the multi-tenant option. The License page shows it in the row MSSP / multi-tenant. See License and Editions.
You are the instance operator: a user with the Administrator role in the default tenant, working in your own tenant (not inside a customer's). The page needs the permissions tenant.read and tenant.write, which the Administrator role has.
Working product email in your own tenant, because a new tenant's first administrator is invited by email (see Email Configuration).

Open Tenants in the main menu. Nobody else sees this menu item.

What the page shows

The Tenants page with the tenants, active and readable counters, the search box, tenant cards with status and access badges, Users, Sources, Open alerts and AI today dials, and the New tenant card

The header reads "Every customer running on this instance, what they hold and what they let you see." Below it:

Three counters: tenants (all customer tenants), active (status Active) and readable (tenants that granted you Read only or Full access).
A search box, "Search by name or domain…".
One card per customer tenant, and a New tenant card at the end ("Creates the tenant and invites its first administrator.").

Your own default tenant is not listed. The page shows up to 200 tenants.

The tenant card

Part of the card	What it shows
Name and domain	The tenant's display name and the address it is reached on.
Status badge	Active, Suspended or Terminated. See Tenant Lifecycle.
Access badge	The support access the tenant has granted you: No access, Read access or Full access. Hover over it: "Granted by the tenant, not by you. Only their administrator can change it."
Pencil icon (Edit)	Change the name, domain or AI request cap.
Power icon	Deactivate on an active tenant; Activate on any other.
Trash icon (Delete permanently)	Erase a deactivated tenant.
Enter	Work inside the tenant. Shown only when the tenant granted access and is not deactivated. Clicking the card itself does the same. See Working Inside a Tenant.
Users, Sources, Open alerts, AI today	Number of user accounts, data sources, open alerts, and SOC-AI requests used today with the daily cap or no cap. Shown only when the tenant granted you access; otherwise the card says "This tenant has not granted you access."

Create a tenant

Prepare the domain first: the DNS record and the certificate (see How Users Reach Their Tenant).

Click New tenant (or, in the tenant switcher in the top bar, Create tenant).

Fill in the fields:

Field	What to enter	Rules
Name	The customer's name	At least 2 characters
Domain	The host name the tenant is reached on, for example `acme.siem.example.com` ("How this tenant is reached. Every request on this host lands in their data.")	Letters, digits, dashes and dots; at least two parts; no `https://`, path or port; unique across all tenants
Administrator email	The email address of the customer's first administrator ("They get an invitation to set their own password.")	A valid email address. It may also exist in other tenants: accounts in different tenants are separate.

The New tenant dialog with the Name, Domain and Administrator email fields and the Create tenant button

Click Create tenant.

UTMStack creates the tenant with the status Active and support access No access, creates the first user with the Administrator role, and emails an invitation that is valid for 7 days. The page says "Tenant created". There is no password option and no way to resend the invitation. If the user cannot be created, the tenant is not created either.

What the administrator must do with the invitation, and how to set up the rest of the tenant, is in Onboarding a Customer.

Edit, deactivate, activate and delete

Action	Where	Summary
Edit	Pencil icon	Change Name, Domain and AI request cap ("Cap this tenant", requests per day; `0` switches SOC-AI off for the tenant). Support access cannot be set here.
Deactivate	Power icon on an active tenant	Type the tenant's name to confirm. The tenant becomes Terminated: its users and API keys are refused, its data is kept.
Activate	Power icon on a deactivated tenant	Brings the tenant back with its data as it was.
Delete permanently	Trash icon on a deactivated tenant	Type the tenant's name, then Delete forever. Erases the tenant and its data. Cannot be undone.

Details, the API-only Suspended status and the checklist before deleting are in Tenant Lifecycle.

The tenant switcher

On a multi-tenant server, the top bar of the instance operator shows a tenant switcher next to the notification bell. It shows Default tenant while you are in your own tenant, or the name of the tenant you are working inside. Open it to:

choose Default tenant to go back to your own tenant;
choose a customer tenant to enter it (only tenants that granted Read only or Full access and are not deactivated are listed);
choose Create tenant to open the New tenant dialog.

The tenant switcher opened in the top bar, listing Default tenant, the customer tenants you can enter, and Create tenant

Messages

Message	Meaning
"Tenant created", "Tenant updated", "Tenant terminated", "Tenant reactivated", "Tenant permanently deleted"	The action worked.
"That domain is already taken"	Another tenant has this domain.
"You do not have permission to do that"	You are not an Administrator of the default tenant, or you are inside a support session.
"Could not load tenants."	The list could not be read; click Retry. On a server without the multi-tenant option, the page is not available.

Other refusals show the server's own message, for example "domain is not a valid hostname" or "tenant is not terminated". See Tenant Lifecycle and Multi-Tenancy FAQ and Troubleshooting.