Tenant governance
Members, roles, access, teams, configuration, data governance, domain and applications.
The tenant is the scope where the work is done: members, teams, applications, records and their configuration live in the tenant. The tenant administrator decides who is in this tenant, what they can do and how the tenant is set up.
This section has the guides to the membership, roles, access, configuration, data governance, teams, config values, domain and application, and tenant applications screens, plus step-by-step articles for common tasks: inviting someone, giving a role, changing a value.
Keep three things in mind. Being a member does not grant any permission on its own; permission comes from a role. Adding someone to a team doesn't grant permission either; it only records who works together. And if the scope above has set a floor on a configuration value, you can write a stricter value but not a looser one.
Articles in Tenant governance
- Screen guideMembersShows who is a member of the selected Tenant and which invites are waiting for an answer; from here you add someone to the Tenant, invite them or remove them.
- Screen guideRolesShows the role assignments given in this Tenant's own scope and which keys the five role archetypes grant here. Roles are given and revoked here.
- Screen guideAccessShows who can actually do what in this Tenant: person by person, which keys apply, which role and which scope each key comes from, and which capabilities and workspaces this access reaches.
- Screen guideConfigurationFor the Tenant the console is in, shows the value in effect for each configuration definition and where that value comes from; you write values for this Tenant here.
- Screen guideData GovernanceShows the lifecycle of this Tenant's data in one place: how long it is kept, what is on legal hold, what has been requested for deletion, and what has been deleted.
- Screen guideTeamsShows this Tenant's teams and who is in each team. You create teams, rename them, and add Tenant members to a team or remove them.
- Screen guideConfig ManagementLists the config values stored in the selected Tenant's own record; you edit them one by one, add new keys, or replace them all with the Account's or the Platform's values.
- Screen guideDomain & Application ManagementAt the platform you author the domain catalogue itself — domains, sub-domains and their applications. In a Tenant you turn on and off which of them can be used there.
- Screen guideApplicationsShows the applications in this Tenant and which of them can actually open; for every application that can't open, it gives the reason and the status of the capabilities the Tenant has requested.
- How-toAdd or invite someone to a tenantOn the Members screen you enter an email and a role: if the person is registered with inlorus they become a member at once; if not, an invite valid for seven days is sent.
- How-toGive a member a role in a tenant and revoke itOn the Roles screen you give a tenant member one of the five archetypes and revoke the assignment when needed.
- How-toChange a configuration value in a tenantOn the Configuration screen you write a setting's value for this tenant. The value is entered as JSON; it cannot be looser than the higher scope's floor.