Containment rules for multitenancy

Multiple tenants can co-exist in a single IBM® Cognos® content store. The containment rules for multitenancy maintain security and ensure isolation between tenants. These rules dictate how the content is created and where it can be located.

Every object in the content store has a tenant ID value that indicates which tenant the object belongs to. This value is based on the tenant ID associated with the session of the user who created the object. Alternatively, system administrators can set the tenant ID value in the user interface or using the software development kit (SDK).

The tenant ID of an object must be the same as the tenant ID of its parent, unless the parent tenant ID is public. If the parent tenant ID is public, the tenant ID for the child can be changed to any value. For more information, see Setting a tenant ID for a public object.

Model and modelView objects inherit their tenant ID from the package. For example, models published to a public package are always public.