What is multi-tenant SaaS?

Multi-tenancy in SaaS allows a single instance of a software application to serve multiple customers, known as tenants. Each tenant's data and configurations remain isolated from other tenants. With Cerbos, you can enforce strict access controls, ensuring each tenant operates within their own secure and customized environment.

Crafting tailored tenant experiences

• Self-service permissions: Empower tenants to craft their own roles and user assignments, enhancing customization and autonomy.
• Scalable core: Cerbos' policy model is designed to support an infinite number of resources and tenants, ensuring your platform scales seamlessly with your business growth.
• Auditable actions: Maintain a comprehensive audit trail, capturing every policy decision, ensuring transparency and compliance.
• Dynamic role adaptability: Derive roles based on context, ensuring flexibility beyond the confines of traditional identity providers.

Designing multi-tenant policies with Cerbos

        
      
      
apiVersion: api.cerbos.dev/v1
resourcePolicy:
 resource: document
  version: default
  rules:
    - actions:
        - read
      effect: EFFECT_ALLOW
      roles:
        - user
      condition:
        match:
          expr: request.resource.attr.tenantId == request.principal.attr.tenantId

This sample policy ensures that users can only access resources associated with their tenant ID. With Cerbos, you can easily adapt and expand such policies to cater to various multi-tenant scenarios.