Multi-Tenant Setup - Global Collections equating to CAPM IP domains show up in every Tenant user in Spectrum
Article ID: 245559
Updated On:
Products
Issue/Introduction
Multi-tenants are configured in CA Performance Management (CAPM) and Spectrum.
However, all the IP domains show up in every Tenant user. Respective Tenant user, should only be able to see their particular Tenant IPDomain GC.
Environment
DX NetOps (Spectrum & CAPM) Release 20.2 or later
Resolution
When Spectrum is integrated with CAPC using the admin user account, CAPC sends across the list of IP Domains.
These will all appear under the Spectrum Global Collections tree in the OneClick Console. The devices you want to be sync'd from Spectrum to each IP Domain in CAPC are then added to each of these IP Domain GCs in Spectrum, which then syncs them across, as per:
TechDocs : DX NetOps CAPM 21.2 : Multi-tenancy and DX NetOps Spectrum
When you log into Spectrum OneClick using a particular user account, the Security string for that user needs to be set to the same as the GC equating to their CAPC IP Domain to ensure multi-tenant users do not see other user items.
So set the security string for the tenant user account to match the security string set for the equivalent tenant IP Domain GC provisioned in Spectrum from CAPC.
If a GC doesn't have any security string set then it will be seen by all users.
Change this to have the correct security string associated with their specific tenant account.
Additional Information
When you log into Spectrum OneClick using a particular user account and you're using Security strings to ensure multi-tenant users do not see other user items, then the following KB article describes why you may see some in certain situations:
The following KB article describes how to setup multi-tenancy using security strings in Spectrum:
KB : Limiting CA Spectrum OneClick User Access In Multi-Tenant Environments.
Attachments
Feedback
