Skip to main content

Hierarchy and Tenancy

Tenancy

A way of assigning assets to a given entity.

Tenancy Type Owner Scope
Company The associated Company Just that Company
Accountability Policy The associated Accountability Policy Available to all Member Companies
System/Appliance The Main Company on that DrawBridge Applies to all tenant Companies on that DrawBridge
Universal None Available to all tenant Companies everywhere

In other words:

The Tenancy Type of a record can be determined by looking at the association relationship(s): All records other than Universal Records have one or more of these tenant relationship associations:

  • A record assigned to a Company belongs to that company
  • A record assigned to an Accountability Policy is available to all Member companies
  • A record assigned to a System/Appliance applies to all tenant companies
  • A record with none of the above relationshiprelationships is available to all companies everywhere.

Hierarchy

In Companies

All Companies on a DrawBridge are tenants, however, for proper record and configuration ownership, it is essential that one Company be the Main Company of a DrawBridge.

The Main Company is the only Company that can configure System-level Access Policies, in addition to controlling other System-wide settings.

All other companies on a system are Sub-Companies, and will inherit and display System-level policies from the Main Company in their Access Policy Dashboards.

In Policies and Permissions

Configuration of records are controlled with permission levels. While Access Policy records, for example, can be re-ordered for a different filter policy configuration, in general, the permission-record association is as summarized in this table:

Priority Record/Permission About
1 Accountability Policy When present, an Accountability Policy dictates what can and can't be done on all other records
2 System A System-level Access policy, for example, can't be removed by a sub-Company Tenant -- #3
3 Company A Sub-Company will inherit the System-level Access Polices, although it can also have its own Access Policies.
Back to top