Tenant management (Analytic Server console)
Tenants provide a high-level division of users, projects, and data sources so that
objects cannot be shared between tenants. Each user accesses the system in the context
of a tenant to which they are assigned.
You manage tenants, and assign users to tenants, in the Analytic Server console. The view of the Tenants page depends upon the role of the user that is logged in to the console:
- The "super user" administrator that is set up during installation is the tenant manager. Only this user can create new tenants and edit the properties of any tenant.
- Users with the Administrator role can edit the properties of the tenant they are logged in to.
- Users with the User role cannot edit tenant properties. The Tenants page is hidden from them.
- Users with the Reader role cannot edit data sources, or even log in to the Analytic Server console.
Tenant listing
The main Tenants page displays the existing tenants in a table. Only the "super user" administrator can make edits on this page.
- Click a tenant's name to display its details and edit its properties.
- Click a tenant's URL to open the console in the context of that tenant. Note: You will be logged out of the console and will need to log in with valid credentials for the tenant.
- Type in the search area to filter the listing to display only tenants with the search string in their name.
- Click New to create a new tenant with the name you specify in the Add new tenant dialog. See Naming rules (Analytic Server console) for restrictions on the names you can give to tenants.
- Click Delete to remove the selected tenant(s).
- Click Refresh to update the listing.
Individual tenant details
The content area is divided into several collapsible sections.
- Details
- Name
- An editable text field that displays the name of the tenant.
- Description
- An editable text field that allows you to provide explanatory text about the tenant.
- URL
- This is the URL to give to users to log in to the tenant through the Analytic Server console, and to use to configure SPSS® Modeler server. See IBM® SPSS Analytic Server Installation and Configuration Guide for details on configuring SPSS Modeler.
- Status
- Active tenants are currently in use. Making a tenant Inactive prevents users from logging in to that tenant, but does not delete any of the underlying information.
- Principals
- Principals are users and groups that are drawn from the security provider that is set up during installation. You can add principals to a tenant as Administrators, Users, or Readers.
- Typing in the text box filters on users and groups with the search string in their name. Select Administrator, User, or Reader from the drop-down list to assign their role within the tenant. Click Add participant to add them to the list of authors.
- To remove a participant, select a user or group in the member list and click Remove participant.
- Metrics
- Allows you to configure resource limits for a tenant. Reports the disk space
currently used by the tenant.
- You can set a maximum disk space quota for the tenant; when this limit it reached, no more data can be written to disk on this tenant until enough disk space is cleared to bring the tenant disk space usage below the quota.
- You can set a disk space warning level for the tenant; when the quota is exceeded, no analytic jobs can be submitted by principals on this tenant until enough disk space is cleared to bring the tenant disk space usage below the quota.
- You can set a maximum number of parallel jobs that can be run at a single time on this tenant; when the quota is exceeded, no analytic jobs can be submitted by principals on this tenant until a currently running job completes.
- You can set the maximum number of fields a data source can have. The limit is checked whenever a data source is created or updated.
- You can set the maximum file size in megabytes. The limit is checked when a file is uploaded.
- Security provider configuration
- Allows you to specify the user authentication provider. Default uses the default tenant's provider, which was set up during installation and configuration. LDAP allows you to authenticate users with an external LDAP server such as Active Directory or OpenLDAP. Specify the settings for the provider and optionally specify filter settings to control the users and groups available in the Principals section.