Initialize tenants for Optimize
Configure initial tenants for Optimize in Camunda 8 Self-Managed.
About Optimize tenants
Tenants managed within Management Identity only apply to Optimize. Furthermore, they're only effective when the following conditions are met:
- You've enabled multi-tenancy checks for your Orchestration Cluster.
- Your tenants have the same identifiers in the Orchestration Cluster and Management Identity.
In this guide, you'll learn how to initialize tenants in your app configuration.
Before you begin
Before you begin, configure a database. Management Identity requires a database to support multi-tenancy
When deploying Camunda 8 with Docker, you can programmatically configure tenants in Management Identity in two ways:
application.yaml- Environment variables
When using Helm to deploy Camunda 8, you must configure tenants using environment variables. Configuration using Helm values is not supported.
Initialize tenants in Management Identity
First, enable the Management Identity multi-tenancy flag:
- application.yaml
- Environment variables
identity:
flags:
multi-tenancy: "true"
MULTITENANCY_ENABLED=true
With multi-tenancy enabled, initialize your tenants:
- application.yaml
- Environment variables
identity:
tenants:
- name: My tenant
tenantId: my-tenant
members:
- type: USER
username: username
- type: GROUP
group-name: group name
- type: APPLICATION
application-id: application-id
Each member type has a corresponding property you use to set the member identifier:
| Member type | Property |
|---|---|
USER | username |
GROUP | group-name |
APPLICATION | application-id |
In some contexts, like the Management Identity UI, the "Application ID" is referred to as the "Client ID".
IDENTITY_TENANTS_0_NAME="My tenant"
IDENTITY_TENANTS_0_TENANTID="my-tenant"
IDENTITY_TENANTS_0_MEMBERS_0_TYPE="USER"
IDENTITY_TENANTS_0_MEMBERS_0_USERNAME="username"
IDENTITY_TENANTS_0_MEMBERS_1_TYPE="GROUP"
IDENTITY_TENANTS_0_MEMBERS_1_GROUPNAME="group name"
IDENTITY_TENANTS_0_MEMBERS_2_TYPE="APPLICATION"
IDENTITY_TENANTS_0_MEMBERS_2_APPLICATIONID="application-id"
Each member type has a corresponding property you use to set the member identifier:
| Member type | Property |
|---|---|
USER | IDENTITY_TENANTS_0_MEMBERS_0_USERNAME |
GROUP | IDENTITY_TENANTS_0_MEMBERS_0_GROUPNAME |
APPLICATION | IDENTITY_TENANTS_0_MEMBERS_0_APPLICATIONID |
In some contexts, like the Management Identity UI, the "Application ID" is referred to as the "Client ID".