Global tenant vs custom tenant

OpenSearch
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
v2.18.0

Describe the issue:

  1. What is the difference between creating a document in a global tenant and creating a document in a custom tenant?

  2. Also, if you create a document in a global tenant and specify the index pattern through the securitytenant header, you can see the global document in that tenant. Is this how it’s set up?

Configuration:

  1. REST API Create Document with securitytenant header
    /{index-name}/_doc
    osd-xsrf : true
    securitytenant : {custom-tenant-name}

  2. REST API Create Index-pattern with securitytenant header
    /api/saved_objects/index-pattern/{index-pattern-name}
    osd-xsrf : true
    securitytenant : {custom-tenant-name}

Relevant Logs or Screenshots:

2

Hi @pizzaman ,

In the Global tenant, every OpenSearch Dashboards user can see visualizations, dashboards, and other OpenSearch Dashboards objects that were created in Global tenant.

In the Custom tenant, only users who have access to the custom tenant can see it.

In the securitytenant header, you can add only a tenant name.

1 Like