Skip to content

Multi-Tenancy🔗

Multi-tenancy in Secureworks® Taegis™ XDR provides an aggregated view across multiple tenants within a single environment, enabling simplified management and monitoring for organizations with several sub-tenants. With this feature, you can view and act on security data across your organization in one place.

Getting Access🔗

If you are interested in multi-tenancy features or want to learn more about how multi-tenancy can help your organization, contact your account manager or customer success manager.

Understanding the Structure🔗

Multi-tenancy introduces the Organization Tenant, which sits above existing child tenants. This structure allows you to view alerts, investigations, and other data across all sub-tenants in your environment.

Note

If your organization has tenants in multiple XDR environments (such as Delta, Foxtrot, or Echo), you will need to access the Organization Tenant within each specific environment to view and manage the sub-tenants that are enabled within that same environment.

  • Access the Organization Tenant to view aggregated data for all associated child tenants within the selected environment.
  • The Multi-Tenant View flag at the top of the dashboard indicates when you are viewing aggregated data.
  • Use Switch Tenant to move between the Organization Tenant and individual child tenants as needed.

Important

Any user with access to the Organization Tenant will by default have access to all tenants maintaining their roles and permissions.

Switch Tenants

Multi-Tenant View🔗

The following features support aggregated data views across tenants:

  • Alert Triage Dashboard
  • Alerts
  • Investigations

You can filter both the Alerts and Investigations tables by selecting one or more tenants, allowing for a focused view of relevant data.

Alert Tenant Filter

Tip

On any table column, press the menu icon and then select the table icon to add the Tenants column. This aligns each row of data with its related tenant.

Add Tenant Table Column

Use Advanced Search in the Organization Tenant to build custom queries for alerts across tenants.

Tip

You can filter by tenant in your search. For example: FROM alert WHERE tenant_id IN ('<tenant_id1>','<tenant_id2>')

Multi-Tenant Search Example

Note

Event searches across multiple tenants are not supported at this time. To search for events, access the specific child tenant. Alert queries are fully supported across tenants within the environment.

Alert Rules🔗

Define custom alert rules from the Organization Tenant. Rules created here will apply to all child tenants in your organization.

Note

Rules defined in the Organization Tenant apply to all child tenants.

Reports🔗

Create reports from the Organization Tenant. Reports provide insights into your entire organization's security posture.

Create Report

Access and Permissions🔗

Manage user access carefully:

  • Creating accounts and granting access to the Organization Tenant allows those users to see data across all child tenants.
  • Customize roles and permissions as needed.
  • Roles set for users in the Organization Tenant are honored at the child tenant level.

Note

If you configure Enterprise SSO at the Organization Tenant level, the connection applies to all child tenants. This ensures a seamless login experience across your organization.

Support🔗

To access support features such as Chat and Help Requests, first select the specific child tenant related to your issue. These options are not available directly from the Organization Tenant.

Note

Chat and Submit a Help Request are removed from the Organization Tenant interface. You can access Documentation, the Help Center, and the Knowledge Base from the Support panel at the bottom of the Taegis Menu.

Accessing Support