Account governance
An account's tenants, roles, policies, security, configuration and entitlements.
An account is the scope that holds an organization's tenants together. The account administrator opens and closes tenants, gives the account's people roles and publishing rights, and stays within the floors that come from the platform.
This section has the guides to the Account Administration, account roles, account policies, account security, account configuration, entitlements and account people screens. A role given in the account also works in the account's tenants; the delete (purge) permission, however, never flows down from above.
Before you can give someone a role or publishing rights in the account, that person must already be a member of one of the account's tenants. Adding someone to a tenant is done from the tenant screens.
Articles in Account governance
- Screen guideTenantsYou see every Tenant under your Account, open a new Tenant and change a Tenant's status.
- Screen guideRolesYou see every role assignment inside this Account — in the Account itself and in its Tenants — and grant or revoke roles in the Account scope.
- Screen guidePoliciesYou read the policy in force in this Account: the permission keys granted by roles assigned in the Account, and the two values of floors inherited from the platform side by side.
- Screen guideSecurityYou see the security posture of the Account selected in the scope switcher, through this Account's people only.
- Screen guideConfigurationYou see, in the Account selected in the scope switcher, the value in force for each configuration setting and where that value comes from.
- Screen guideEntitlementsYou see what the selected Account has acquired from the marketplace, what each entitlement allows and what is on sale right now.
- Screen guidePeopleYou see who holds which role in an Account and who can publish, and you grant or revoke publishing rights (builder).
- How-toGive someone publishing rights (builder) in the accountOn the account People screen you give the builder role, in the account scope, to someone who is already a member of one of the account's tenants; that person can then publish the account's capabilities.