Use the ZEDEDA CLI to Create a Child Enterprise

Introduction

A ZEDEDA Enterprise is like a tenant of an apartment building complex; the apartment building is separated into individual apartments, and a different person (or tenant) lives in each apartment. 

In a technology scenario, the concept of multi-tenancy allows multiple tenants to share underlying infrastructure while retaining isolation and security between environments. Each enterprise is its own isolated workspace, with separate controls, data storage, RBAC, configurations, edge nodes, and more.

If you are a service provider (sometimes called parent enterprise or root enterprise or parent tenant), you can provision your own customers (sometimes called child enterprises or child tenants) through the ZEDEDA CLI. You can manage your child enterprises, and each child enterprise can manage itself, but the child enterprises have no access or knowledge of each other.  

Prerequisites

• You must have either the sysroot or CSadmin Role in your ZEDEDA Cloud enterprise.
• ZCLI is running. 

Create the Child Enterprise and Admin

1. Use ZCLI to configure the parent enterprise and user.

   zcli configure \ 
   --server=<server> \     (such as zedcontrol.zededa.net)
   --user=<userid> \       (such as sysadmin or CSadmin) 
   --password=<password> \ 
   --output=text 

2. Log into the parent enterprise.
   

   zcli login

3. After you are logged in, run the command to create the child enterprise. The following is the sample command to create a child enterprise and also an admin for the child enterprise:
   

   zcli enterprise create <child_enterprise_name> \ 
   --admin-user=<child_username@domain> \ 
   --admin-email=<child_email_address> \ 
   --admin-password=<child_pwd> \ 
   --title=<child_enterprise_dev> \ 
   –-inherit-auth

   Example

   zcli enterprise create MY_CHILD_ENTERPRISE \ 
   --admin-user=BOB-ADMIN@ENTERPRISE.COM \ 
   --admin-email=BOB@ENTERPRISE.COM \ 
   --admin-password=PASSWORD123@ \ 
   --title=MY_CHILD_ENTERPRISE_DEV \ 
   –-inherit-auth

4. The command output will show that the enterprise is created. 

Update the Child Enterprise

To toggle between parent and child enterprises during login, include the --inherit-auth option when establishing the enterprise. If the enterprise is already created, you can still integrate this feature by updating it. 

zcli enterprise update <child_enterprise_name> --inherit-auth

zcli enterprise update MY_CHILD_ENTERPRISE --inherit-auth

Log into a Child Enterprise

Access the parent GUI URL and log in using the child enterprise admin credentials. For example,  https://zedcontrol.zededa.net/ with BOB-ADMIN@ENTERPRISE.COM/PASSWORD123@ 

Delete a Child Enterprise

Note that this cannot be undone. 

zcli enterprise delete <child_enterprise_name>

zcli enterprise delete MY_CHILD_ENTERPRISE