Multitenancy

Multitenancy is a mode where the solution is used to protect the infrastructure of several organizations at the same time.

You can use Kaspersky Endpoint Detection and Response Optimum to protect the infrastructure of several organizations at the same time using Kaspersky Security Center. To do this, create virtual Administration Servers for the organizations that you want to protect using Kaspersky Endpoint Detection and Response Optimum. These virtual Administration Servers must be created under the Administration Server of the provider organization. For details on creating virtual Administration Servers, refer to the Kaspersky Security Center Help and Kaspersky Security Center Cloud Console Help.

For each tenant organization, create a dedicated virtual Administration Server and accounts for virtual server administrators. For information about configuring administrator accounts, refer to the Kaspersky Security Center Help and Kaspersky Security Center Cloud Console Help.

The administrator of the main Administration Server can manage the solution on all devices that are managed by this Server. The administrator of the virtual Administration Server can manage the solution only on the devices connected to the server that he or she administers.

Multitenancy support in Kaspersky Endpoint Detection and Response Optimum has the following limitations:

• In Kaspersky Security Center Cloud Console, permissions can be assigned only to accounts registered using Active Directory.
• When using Kaspersky Security Center Cloud Console and Kaspersky Security Center Web Console 14 and earlier:
  • Administrator permissions for the tenant organization must be assigned before creating a virtual Administration Server. After creating a virtual Administration Server, it is not possible to add or remove the Administrator account.
  • Administrators of virtual Administration Servers have the Read permission for the main Server.