[{"data":1,"prerenderedAt":288},["ShallowReactive",2],{"blog-business-services-redefining-multi-tenancy":3,"authors":137},{"id":4,"title":5,"author":6,"body":7,"categories":118,"category":119,"date":120,"description":121,"extension":122,"featured":123,"fields":118,"image":56,"keyTakeaways":118,"meta":124,"modified":118,"navigation":125,"path":126,"seo":127,"slug":128,"stem":129,"tags":130,"__hash__":136},"blog\u002Fblog\u002Fbusiness-services-redefining-multi-tenancy.md","Business Services: Redefining Multi-Tenancy","Luke Richardson",{"type":8,"value":9,"toc":110},"minimark",[10,22,27,30,34,37,40,44,47,50,57,60,66,70,76,82,90,93,96,99],[11,12,13,14,21],"p",{},"Over the last decade or so, I have worked with many organisations and while all of them are different, they have many things in common. One thing organisations have in common is the need for more flexibility in the authentication system to give them the ability to provide access to resources being managed by the people who need to see them. This needs to include the ability to view individual resources, like interfaces and chart data, which are defined at a lower level than the operating system (e.g. a node). It needs to be possible to permit users of the ",[15,16,20],"a",{"href":17,"rel":18},"https:\u002F\u002Ffirstwave.com\u002Fproducts\u002Fnetwork-management-information-system\u002F",[19],"nofollow","network management system"," access to more specific data from almost arbitrary objects.",[23,24,26],"h2",{"id":25},"a-new-approach-to-authorisation","A New Approach to Authorisation",[11,28,29],{},"Over the last few months, FirstWave has been working on an alternate authorisation system which will permit our customers to be able to define views of what is being managed so that they can permit their customers to see information that they might not ordinarily be able to see without giving them access to view an entire node.",[23,31,33],{"id":32},"service-provider-use-case","Service Provider Use Case",[11,35,36],{},"A simple example of the benefits of this capability would be for service providers who have shared equipment, where multiple customers are using one or more interfaces from one or more switches. This might be a metropolitan area network, with switches in the basements of buildings and each customer uses one or more interfaces.",[11,38,39],{},"With our new multi-tenancy authorisation, roles are created for each customer and the associated user names, then several business service views are created by selecting the interfaces of one or more switches and adding them to a business services view for the customer. When the customer logs in, they have access to see the business services view and all of the associated interfaces. They are then able to drill into the interface to see the statistics.",[23,41,43],{"id":42},"third-party-vendor-access","Third-Party Vendor Access",[11,45,46],{},"Another good example of this might be an IT services company which provides general IT services to businesses, along with network and server management. Amongst the equipment being managed are some telephones and the related network interfaces. A partner of the IT services company assists with the management of the phone systems and requires the ability to see switch ports which the phones connect to. With traditional authorisation schemes the telephony engineers would require logins giving them permission to see the entire switch, including interfaces for things not related to their duties.",[11,48,49],{},"With the new multi-tenancy authorisation, a business services view can be created and the required telephony interfaces added to that view. When the telephony engineer logs into the system, they will only see the interface information they need to keep an eye on the telephony system.",[11,51,52],{},[53,54],"img",{"alt":55,"src":56},"opCharts Business Services view","\u002Fimages\u002Fblog\u002FopCharts-Business-Services-1-View-700.png",[11,58,59],{},"As an option, the ability to display summary node information in business services views is also available, allowing key operational summary information to be shared without providing access to the full device. When clicking on an interface name, it is possible to see the detailed graph of the interface.",[11,61,62],{},[53,63],{"alt":64,"src":65},"opCharts Business Services interface detail","\u002Fimages\u002Fblog\u002FopCharts-Business-Services-2-Interface-View-700.png",[23,67,69],{"id":68},"extending-to-charts-and-maps","Extending to Charts and Maps",[11,71,72],{},[53,73],{"alt":74,"src":75},"opCharts map locations view for multi-tenant access","\u002Fimages\u002Fblog\u002FopCharts-Map-Locations-700.png",[11,77,78],{},[53,79],{"alt":80,"src":81},"opCharts dashboard home page","\u002Fimages\u002Fblog\u002FopCharts-Dashboard-Home-Page.png",[11,83,84,85,89],{},"While providing this is already very powerful, we felt that providing more detailed access would also be beneficial, so we have extended this capability to the charts and maps in ",[15,86,88],{"href":87},"\u002Fproducts\u002Fopcharts\u002F","opCharts",". This means that you can create a chart including, for example, the CPU load of several devices, and then permit the customer to view that chart. The same applies to maps.",[11,91,92],{},"Going forward, FirstWave will expand this capability significantly to include more granularity in the authorisation and more resources available to be permitted. We will also work to simplify administration of the system wherever possible.",[11,94,95],{},"We are very excited by being able to take authorisation to a new level of flexibility and simplicity, enabling our customers to in turn be more flexible with their customers and manage third-party vendor access more diligently.",[97,98],"hr",{},[11,100,101,105,106],{},[102,103,104],"strong",{},"Related reading:"," ",[15,107,109],{"href":108},"\u002Fblog\u002Fmonitoring-business-services\u002F","Monitoring Business Services",{"title":111,"searchDepth":112,"depth":112,"links":113},"",2,[114,115,116,117],{"id":25,"depth":112,"text":26},{"id":32,"depth":112,"text":33},{"id":42,"depth":112,"text":43},{"id":68,"depth":112,"text":69},null,"Network Management","2016-05-18","How FirstWave's new multi-tenancy authorisation system enables granular, interface-level access control for service providers and their customers.","md",false,{},true,"\u002Fblog\u002Fbusiness-services-redefining-multi-tenancy",{"title":5,"description":121},"business-services-redefining-multi-tenancy","blog\u002Fbusiness-services-redefining-multi-tenancy",[131,132,133,134,135],"multi-tenancy","opcharts","nmis","service providers","rbac","5Rbaxh_DZfmOEuV8UJWROrWYLwcjspS7uYtvk1Ijm5Q",[138,151,164,181,194,207,228,241,254,275],{"id":139,"title":140,"aliases":118,"avatar":118,"body":141,"description":111,"extension":122,"inactive":123,"kind":118,"links":118,"meta":145,"navigation":125,"path":146,"role":118,"seo":147,"slug":148,"stem":149,"tagline":118,"__hash__":150},"authors\u002Fauthors\u002Fchris-jacko.md","Chris Jacko",{"type":8,"value":142,"toc":143},[],{"title":111,"searchDepth":112,"depth":112,"links":144},[],{},"\u002Fauthors\u002Fchris-jacko",{"title":140,"description":111},"chris-jacko","authors\u002Fchris-jacko","-5nEsaQsigkcWpKzYAqcAMNdd5X_63lHLFxBErQh-BY",{"id":152,"title":153,"aliases":118,"avatar":118,"body":154,"description":111,"extension":122,"inactive":123,"kind":118,"links":118,"meta":158,"navigation":125,"path":159,"role":118,"seo":160,"slug":161,"stem":162,"tagline":118,"__hash__":163},"authors\u002Fauthors\u002Fdamian-fielke.md","Damian Fielke",{"type":8,"value":155,"toc":156},[],{"title":111,"searchDepth":112,"depth":112,"links":157},[],{},"\u002Fauthors\u002Fdamian-fielke",{"title":153,"description":111},"damian-fielke","authors\u002Fdamian-fielke","3PEJAVsJcgwSNJ1JITFFtKm4oEaNBZtPdNswW2VTo9U",{"id":165,"title":166,"aliases":167,"avatar":169,"body":170,"description":111,"extension":122,"inactive":123,"kind":174,"links":118,"meta":175,"navigation":125,"path":176,"role":118,"seo":177,"slug":178,"stem":179,"tagline":118,"__hash__":180},"authors\u002Fauthors\u002Ffirstwave-team.md","FirstWave Team",[168],"FirstWave","\u002Fbrand-assets\u002Flogos\u002Ffirstwave\u002Ffirstwave-logo-400x400.png",{"type":8,"value":171,"toc":172},[],{"title":111,"searchDepth":112,"depth":112,"links":173},[],"organization",{},"\u002Fauthors\u002Ffirstwave-team",{"title":166,"description":111},"firstwave-team","authors\u002Ffirstwave-team","Bo2R0Jf6KPnxzN8ZkUNQCgcXInERWo9t7QcDaVG10KA",{"id":182,"title":183,"aliases":118,"avatar":118,"body":184,"description":111,"extension":122,"inactive":123,"kind":118,"links":118,"meta":188,"navigation":125,"path":189,"role":118,"seo":190,"slug":191,"stem":192,"tagline":118,"__hash__":193},"authors\u002Fauthors\u002Fjames-banks.md","James Banks",{"type":8,"value":185,"toc":186},[],{"title":111,"searchDepth":112,"depth":112,"links":187},[],{},"\u002Fauthors\u002Fjames-banks",{"title":183,"description":111},"james-banks","authors\u002Fjames-banks","XUyPfpVxtEsDafIwYwj83M5KT5uOLkuxhJVUkSPy2co",{"id":195,"title":196,"aliases":118,"avatar":118,"body":197,"description":111,"extension":122,"inactive":123,"kind":118,"links":118,"meta":201,"navigation":125,"path":202,"role":118,"seo":203,"slug":204,"stem":205,"tagline":118,"__hash__":206},"authors\u002Fauthors\u002Fjessica-hall.md","Jessica Hall",{"type":8,"value":198,"toc":199},[],{"title":111,"searchDepth":112,"depth":112,"links":200},[],{},"\u002Fauthors\u002Fjessica-hall",{"title":196,"description":111},"jessica-hall","authors\u002Fjessica-hall","WdFYsoJ1la6mKj2UVtjze0aJqOHikzY7rSnpgFXg65k",{"id":208,"title":6,"aliases":118,"avatar":209,"body":210,"description":214,"extension":122,"inactive":123,"kind":118,"links":217,"meta":220,"navigation":125,"path":221,"role":222,"seo":223,"slug":224,"stem":225,"tagline":226,"__hash__":227},"authors\u002Fauthors\u002Fluke-richardson.md","\u002Fimages\u002Fteam\u002Fluke-richardson.jpeg",{"type":8,"value":211,"toc":215},[212],[11,213,214],{},"My focus is on building systems, automations, and highlighting ways FirstWave products can solve the everyday IT Networking nerd.",{"title":111,"searchDepth":112,"depth":112,"links":216},[],{"linkedin":218,"github":219},"https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Flukedrichardson\u002F","https:\u002F\u002Fgithub.com\u002Fluker-rgb\u002F",{},"\u002Fauthors\u002Fluke-richardson","Head of Marketing",{"title":6,"description":214},"luke-richardson","authors\u002Fluke-richardson","Can't see the woods amongst the trees without Open-AudIT","SZylsD9NCkjp2XdGUuI55Nj2PnQ8OtAWNJGjWvTrigE",{"id":229,"title":230,"aliases":118,"avatar":118,"body":231,"description":111,"extension":122,"inactive":123,"kind":118,"links":118,"meta":235,"navigation":125,"path":236,"role":118,"seo":237,"slug":238,"stem":239,"tagline":118,"__hash__":240},"authors\u002Fauthors\u002Folivia-gribben.md","Olivia Gribben",{"type":8,"value":232,"toc":233},[],{"title":111,"searchDepth":112,"depth":112,"links":234},[],{},"\u002Fauthors\u002Folivia-gribben",{"title":230,"description":111},"olivia-gribben","authors\u002Folivia-gribben","ZSnPtTAye23G8U1Q9gebwWVfVX_tO5E2Mf6D5FfIxEk",{"id":242,"title":243,"aliases":118,"avatar":118,"body":244,"description":111,"extension":122,"inactive":123,"kind":118,"links":118,"meta":248,"navigation":125,"path":249,"role":118,"seo":250,"slug":251,"stem":252,"tagline":118,"__hash__":253},"authors\u002Fauthors\u002Fsarah-lispet.md","Sarah Lispet",{"type":8,"value":245,"toc":246},[],{"title":111,"searchDepth":112,"depth":112,"links":247},[],{},"\u002Fauthors\u002Fsarah-lispet",{"title":243,"description":111},"sarah-lispet","authors\u002Fsarah-lispet","E955cfPrBH-u0nNKbJ-DdAAUhA1JST-Go0EODcGv9LY",{"id":255,"title":256,"aliases":118,"avatar":257,"body":258,"description":262,"extension":122,"inactive":123,"kind":118,"links":265,"meta":267,"navigation":125,"path":268,"role":269,"seo":270,"slug":271,"stem":272,"tagline":273,"__hash__":274},"authors\u002Fauthors\u002Fsharon-hunneybell.md","Sharon Hunneybell","\u002Fimages\u002Fteam\u002Fsharon-hunneybell.png",{"type":8,"value":259,"toc":263},[260],[11,261,262],{},"Over 20 years of experience as a technology leader. Recognised by the AFR as one of Australia's Top 100 Women of Influence in Technology and Innovation. Industry Fellow at Griffith University.",{"title":111,"searchDepth":112,"depth":112,"links":264},[],{"linkedin":266},"https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Fsharonhunneybell\u002F",{},"\u002Fauthors\u002Fsharon-hunneybell","VP of Products",{"title":256,"description":262},"sharon-hunneybell","authors\u002Fsharon-hunneybell","Technology leader with over 20 years in the industry, and an Industry Fellow at Griffith University.","tlbya__xxsO4vAF3WX8gNdnlgdxP-NuSHGQSKO1Zhgs",{"id":276,"title":277,"aliases":118,"avatar":118,"body":278,"description":111,"extension":122,"inactive":123,"kind":118,"links":118,"meta":282,"navigation":125,"path":283,"role":118,"seo":284,"slug":285,"stem":286,"tagline":118,"__hash__":287},"authors\u002Fauthors\u002Fsimon-may.md","Simon May",{"type":8,"value":279,"toc":280},[],{"title":111,"searchDepth":112,"depth":112,"links":281},[],{},"\u002Fauthors\u002Fsimon-may",{"title":277,"description":111},"simon-may","authors\u002Fsimon-may","0in6dS2PIxCquqjG_2uCTM8PAw3O1xyMGHfcNRgCm8w",1788507217567]