​
Tenants

A tenant represents an organization or group. Tenants contain users and can be granted permissions on datasets, which apply to all members. This enables organization-wide access control and simplifies permission management for teams.
Tenant-level permissions — When a tenant is granted a permission on a dataset, all users in that tenant automatically inherit that permission.

​
Tenant Concept

Tenants are created by users who become the tenant owner. The owner can add other users to the tenant. Users can belong to at most one tenant, but tenants can contain multiple users.

​
Tenant-Level Permissions

When a tenant is granted a permission on a dataset, all users in that tenant automatically inherit that permission. This happens through the permission checking mechanism: get_all_user_permission_datasets() unions the user’s direct permissions with their tenant’s permissions. Tenants start with zero permissions. You can leave the tenant principal empty and manage access purely through individual user permissions, or grant tenant-wide permissions for organization-wide resources.

​
Permission Inheritance

Tenant-level grants are blanket: once a dataset permission is assigned to the tenant principal, every user whose tenant_id matches inherits it. Users can also receive direct permissions that differ from the tenant defaults, giving you flexibility to customize access for specific users within the same tenant.

​
Tenant Management

Tenant owners can:
  • Add users to the tenant
  • Remove users from the tenant
  • Grant permissions to the tenant principal
  • Manage tenant-level access to datasets

​
Use Cases

Tenants are ideal for:
  • Organization-wide access — Grant broad permissions to all team members
  • Department-level isolation — Keep different departments’ data separate
  • Project-based grouping — Organize users around specific projects or initiatives
  • Scalable permission management — Avoid granting individual permissions to many users

​
Data Isolation

Each tenant’s data is completely isolated:
  • Database separation — Each user’s data is stored in their own directory
  • Permission boundaries — Users can only access datasets they have permissions for
  • No cross-tenant access — Data from one tenant cannot be accessed by users from another tenant

​
Best Practices

  • Start with tenant-level permissions — Grant broad access at the tenant level
  • Refine with user permissions — Override tenant defaults for specific users when needed
  • Use roles for granular control — Create roles within tenants for more specific access patterns
  • Regular permission audits — Review and update permissions as team structure changes

Roles

Learn about role-based permissions within tenants

ACL

Understand how permissions are stored and checked