Multitenancy

Multitenancy is an operation mode when the solution is used to protect infrastructure of several organizations at the same time.

You can use Kaspersky Endpoint Detection and Response Optimum to protect infrastructure of several organizations at the same time using Kaspersky Security Center. For this purpose create virtual Administration Servers for the organizations which you want to protect using Kaspersky Endpoint Detection and Response Optimum. These virtual Administration Servers must be created under the Administration Server of the provider organization. For details on creating virtual Administration Servers, refer to Kaspersky Security Center Help and Kaspersky Security Center Cloud Console Help.

For each tenant organization, create a dedicated virtual Administration Server and accounts for virtual server administrators. For information about configuring administrator accounts, refer to Kaspersky Security Center Help and Kaspersky Security Center Cloud Console Help.

The administrator of the main Administration Server can manage the solution on all devices that are managed by this Server. The administrator of the virtual Administration Server can manage the solution only on the devices connected to the Server that he administers.

Multitenancy support in Kaspersky Endpoint Detection and Response Optimum has the following limitations:

• In Kaspersky Security Center Cloud Console, permissions can be assigned only to the accounts registered using the Active Directory.
• When using Kaspersky Security Center Cloud Console and Kaspersky Security Center Web Console 14 and earlier:
  • Administrator permissions for the tenant organization must be assigned before creating a virtual Administration Server. After creating a virtual Administration Server, it is not possible to add or remove the Administrator account.
  • Administrators of virtual Administration Servers have the Read permission for the main Server.

Page top