# Global tenant and private tenant

**URL:** <https://forum.opensearch.org/t/global-tenant-and-private-tenant/18207>\
**Category:** OpenSearch\
**Created:** [March 1, 2024, 12:22pm UTC](https://forum.opensearch.org/t/global-tenant-and-private-tenant/18207 "2024-03-01T12:22:48Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ruslan](https://avatars.discourse-cdn.com/v4/letter/r/2bfe46/32.png) [@Ruslan](https://forum.opensearch.org/u/Ruslan)\
**Post date:** [March 1, 2024, 12:22pm UTC](https://forum.opensearch.org/t/global-tenant-and-private-tenant/18207/1 "2024-03-01T12:22:48Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):  
OpenSearch: 2.7.0  
OpenSearch Dashboard: 2.7.0

**Describe the issue** :  
Hello for everyone  
There is a problem: the transition to the tenant does not work, all users always remain within the global tenant.

Description of the bug:

1. All index patterns are created in the global tenant, even if you first switch to the context of another tenant.

2. The user always stays within the global tenant. If the user is not granted rights to the global tenant, then nothing will be available for viewing, even when choosing his tenant, because the index patterns in the global tenant

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [March 1, 2024, 12:35pm UTC](https://forum.opensearch.org/t/global-tenant-and-private-tenant/18207/2 "2024-03-01T12:35:36Z")

</div>

@Ruslan Could you share your config.yml and opensearch\_dashboards.yml files? Also please share entries related to the users and custom tenants from tenants.yml, roles.yml and roles\_mapping.yml files.

---

<div class="post-metadata">

**Author:** ![faxmodem](https://avatars.discourse-cdn.com/v4/letter/f/9dc877/32.png) [@faxmodem](https://forum.opensearch.org/u/faxmodem)\
**Post date:** [November 22, 2024, 1:13pm UTC](https://forum.opensearch.org/t/global-tenant-and-private-tenant/18207/3 "2024-11-22T13:13:09Z")

</div>

We had the same issue and pinned the problem down to the Dashboards configuration file.  
Thing is, we migrated over from ES/SearchGuard, and one of the critical elements was renamed. So we replaced this `opensearch-dashboards.yml` snippet :

```auto
opensearch.requestHeadersAllowlist:
- sgtenant

```

with:

```auto
opensearch.requestHeadersAllowlist:
- securitytenant

```

The thing that’s misleading is that the opensearch dashboards page is reporting that everything is okay and that the user is in tenant `foo`, while in fact the server never accepts the http header for the tenant.