Introducing Multi-tenancy in the ArcSight Platform
This release introduces the following enhancement in the ArcSight Platform:
Introduces the Ability to Create a Multi-tenant Environment
This release gives you the ability to create and manage multiple tenants in your environment. In a multi-tenant environment, a provider offers platform services to its tenants. A provider can be an enterprise that wants to create different tenants for different groups or regions within its organizational structure or an MSSP organization that offers subscription services to tenant organizations.
The following considerations apply for a multi-tenant environment:
-
After you enable Multi-tenancy, you cannot disable it or revert to single-tenant mode.
-
You cannot use the Multi-tenancy feature with the ArcSight Intelligence capability.
-
You cannot assign the Perform Event Integrity Check permission to a tenant user. Only a provider user can run the checks.
For more information, review the following content:
-
Planning for Multi-tenancy in the Administrator's Guide for Arcsight Platform
-
Enabling Multi-tenancy in the Administrator's Guide for Arcsight Platform
-
Setting Up Multi-tenancy in the User's Guide for ArcSight Platform.
Benefits of Optics in a Multi-tenant Environment
Optics help you gain insight into specific aspects of your environment by visualizing correlated events from ArcSight ESM, which you can filter and drill into. Depending on your permissions, you can view tenant-specific data or a rolled-up view of data across multiple tenants.
For example, a CISO might want a quick overview of alerts worldwide or review key security metrics based on alerts. A security analyst can quickly identify potential threats and take the necessary actions to mitigate risks.