A Tenant is a logical grouping of Namespaces, Clients and Tokens.

Tenants typically represent a single application or set of microservices, that will all share the same permissions model.

Tenant Slug#

Tenants have a globally unique name called a slug, which is also used as the prefix for all Namespaces defined underneath that tenant.

For example, a tenant with the slug myapplication, might have namespaces:

  • myapplication/resource
  • myapplication/group
  • myapplication/user

Since tenant slugs are globally unique, we recommend using a descriptive slug, such as your company name followed by the application name.

Tenant Kinds#

Tenants can be defined as either Development or Production tenants.

A Development tenant allows for easy resetting of the entire tenant's Namespaces and Tuples, and has limits on the numnber of tuples allowed and API calls made.

A Production tenant has no restrictions on API call or tuple count, but cannot be one-click cleared.

KindEasy To ClearAPI and Tuple Limits

Creating a Tenant#

A tenant can be created in the Tenants section of the Authzed Management Dashboard.

Using a Tenant#

To make API calls to a Tenant, a token with permission on the tenant is required. Tokens can be created under Clients or Users, and can be granted permissions on the tenant in the Authzed Management Dashboard.