| Table of Contents |
|---|
| minLevel | 2 |
|---|
| maxLevel | 2 |
|---|
| type | flat |
|---|
|
What permissions do I need?
To access this area, the admin must have the Custom data access permission as well as the Multitenancy administration permission. These permissions are not visible by default and only Devo admins have them. If you need other users to have them, please contact us.
...
Define data access
As mentioned in previous articles, a multitenant admin can define sets of rules that allow specific domains in the plan to access data from other domains in the same multitenant plan.
...
| Rw ui steps macro |
|---|
In Devo, go to Administration → Multitenancy. As explained above, only Admin users with the Multitenancy administration permission assigned to their role will be able to access this area.  Image Removed Image AddedYou will access the Domains with custom data access permissions area. Click the Overview area. Go to the Custom data access tab and click Add data access permission at the top right of the screen to define a new rule.  Image Removed Image AddedTo access this area, the user that will manage data access across domains must have the Custom data access permission assigned to their role. Learn more about roles and permissions in this article. | Note |
|---|
This permission is not visible by default. In order to define which domain and roles will be able to manage data access, please contact us. |
In the New data access permission window that appears, enter the following information: Root domain | Choose the domain you want to give custom data access to other domains. You will see all the domains included in the multitenant plan in the dropdown selector, including yours. | Info |
|---|
Note that you can create as many access permission rules as required. However, you can only set one rule per domain. Once you define a custom access permission for a domain, it will no longer appear in this dropdown selector.
|
|
|---|
Domain selection criteria | In the Domain selection criteria field, select the rule that will dictate the child domains that the root domain will have access to. The options are:
All domains - The root domain will have access to the data in all the domains of the multitenant structure.  Image Removed Image Added
Domain starts with - The root domain will have access to data in domains that start with a specified prefix. Enter the required prefix in the Selection filter value field that appears.  Image Removed Image AddedThe root domain is always included by default.
Domain ends with - The root domain will have access to data in domains that end with a specified suffix. Note that this only applies to the left part of the tenant names, as the right part is the same for all them. Enter the required suffix in the Selection filter value field that appears.  Image Removed.png?version=1&modificationDate=1683638730010&cacheVersion=1&api=v2&width=340) Image AddedThe root domain is always included by default.
Choose specific domains - The root domain will have acces access to data in specific domains in the multitenant plan. The Select the specific domains area appears, where you can choose the required child domains from the dropdown list. You can add Note that the dropdown list will only show a maximum of 500 child domains using this method.  Image Removed, but there are no limit in the number of domains that can be added as children.  Image Added| Note |
|---|
Please bear in mind that using this criteria may affect asset maintainability. Keep in mind the best practices explained below if you need to use it, or choose a different selections criteria when possible. |
|
|---|
You will see the number of domains that match the selected criteria at the bottom of the window. Click Save changes when you’re done. |
The new data access rule will appear in the main area of the Domains with custom data access permissions window, where you can check and manage all the permission rules defined for your multitenant plan.
...
Best practices for data access across domains
When defining data access across domains in a multitenant plan, it is highly recommended to follow a specific naming schema for your tenants in order to improve asset maintainability. In this way, you will avoid problems when you need to add additional tenants to specific access permission rules.
...
