Multi-Tenancy

RE: Multi-Tenancy

Stefan Helzle — Sat, 02 Sep 2023 16:27:59 GMT

Agreed. But multi-tenancy can mean so many things ...

RE: Multi-Tenancy

Mathieu Drouin — Sat, 02 Sep 2023 15:58:52 GMT

No but it is a feature that was introduced since then that can make it easier to build a multi tenant application.

RE: Multi-Tenancy

Stefan Helzle — Sat, 02 Sep 2023 15:40:31 GMT

That's not full multi tenancy.

RE: Multi-Tenancy

Mathieu Drouin — Sat, 02 Sep 2023 11:22:26 GMT

What about Record Security?

RE: Multi-Tenancy

Stefan Helzle — Sat, 02 Sep 2023 10:01:38 GMT

No progress here ...

RE: Multi-Tenancy

David Roberts — Fri, 01 Sep 2023 15:09:31 GMT

As this post is 2-3 years old, I was wondering if there has been any progress or updates wrt multi-tenancy options in Appian?

RE: Multi-Tenancy

Stefan Helzle — Thu, 10 Jun 2021 09:51:04 GMT

Hm ... in general you need to make sure that the tenant is is stored in all tables and used in all queries. Regardless of how data is queried. Same for stored procedures, views etc.

This is an add-on to any kind of row-level access by user or group.

RE: Multi-Tenancy

siddharthg837 — Thu, 10 Jun 2021 09:04:17 GMT

Hi Stefan - when you say all queries go through records, do you essentially mean all data query operations (QE, etc) go through records? Can you please quote a basic example around this. Also, another question I have how do you control the security when your data is coming from Stored Procedures?

In nutshell, should we not have the "row-level" security on each record/ tuple in the database, and accordingly fetch the data set?

2) When it comes to group-level user security - how are records associated with it? (I am assuming you are referring to Appian record object here?)

RE: Multi-Tenancy

Stefan Helzle — Sun, 01 Nov 2020 13:37:47 GMT

As there is no direct support for multi tenancy, I think the best way is to build completely record based and store the tenant level group id in the records. Then only use queryRecord to make sure all queries go through the record. To identify in which tenant group a user is, you can create a group type for the tenant groups and then use getgroupsoftypeforuser() from the People Functions plugin.