Introducing multitenancy for HCL Universal Orchestrator
Multitenancy is a new architecture that enables a single HCL Universal Orchestrator instance to serve multiple, independent tenants.
This capability is designed for service providers and large enterprises that need to provide isolated automation environments for different customers or business units while sharing the underlying infrastructure. Each tenant operates with its own data, configuration, and user permissions, ensuring strict separation and security.
- Efficient resource utilization
- By sharing a common infrastructure, you can reduce the operational overhead associated with hardware and software compared to deploying and maintaining separate instances.
- Rapid tenant provisioning
- New tenants can be created and provisioned via the Tenant Manager. This enables an accelerated onboarding of new tenants.
- Centralized platform management
- Service provider administrators manage the core instance. System maintenance and software updates are applied centrally, reducing overall administrative tasks.
- Security and data isolation
-
The architecture is designed with security as a primary consideration to enforce tenant separation.
- Database segregation: each tenant is allocated a dedicated database that is encrypted with a unique key. This prevents cross-tenant data access at the storage layer.
- Per-tenant authorization: user access is controlled at the tenant level. A user permissions and Access Control Lists (ACLs) are specific to each tenant.
- Secure event handling: in shared services like Kafka, all messages are tagged with a tenant ID and individually encrypted to prevent data leakage within the event stream.
For detailed procedures on configuring and managing this feature, see Administering multitenancy for service providers.