to manage a hierarchy of business units and organizations that are
referred to as a tenant service group. A tenant service
group (TSG) is used by the
Prisma SASE Multitenant
Cloud Management Platform
a logical container which contains SASE tenants and
other TSGs. It is the building block for a multitenancy hierarchy.
Generally, this hierarchy is described as a series of nested tenants,
where a tenant is used to manage, monitor, and license SASE products
such as Prisma Access.
But mechanically, a tenant is just a TSG. The terms are often used
Each tenant is automatically assigned a TSG
ID, which is primarily for use with service accounts.
However, the TSG ID is also used for default login purposes. If
you clear your cache, or if you log out of the
and log back in, you are logged into the top-level parent
tenant with the lowest TSG ID by default. The top-level parent tenant
with the lowest TSG ID is likely the first one you created.
you create a tenant, you can allocate a supported product license
to it or you can create a child tenant and allocate the license
to it. Licenses are allocated per each child that you need to manage.
you are adding a tenant for the first time, you are automatically