Tenants

A tenant is one company's isolated space in Ciyora Fabric: its people, devices, settings, data and audit chain.

• Selecting the tenant. When you sign in, your token lists the organizations you belong to. Ciyora Console keeps the active one in your session and sends it with every API call. The API checks that the tenant is one of the organizations in your token before doing anything.
• Switching. People who belong to more than one company, such as a group security team or a managed service provider, switch with the company switcher. Nothing is shared across tenants by switching.
• Scope. Every query is scoped to the active tenant. Sensitive values, such as vault secrets and connector credentials, are encrypted with a data key that belongs to the tenant.
• Features and plan. Which modules and features a tenant has comes from its plan, with tenant-level settings that administrators can see under Settings > Features.

Ciyora operators can see the list of tenants for support and licensing, but the platform-admin area is restricted to a separate operator role and organization.