Skip to main content

Exabeam Security Operations PlatformMulti-Org Guide

About Multi-Org Management

For managed security service providers (MSSPs) and hierarchical enterprises that need to manage security operations for other organizations with multiple licenses, Exabeam provides multiple organization (Multi-Org) management for the Exabeam Security Operations Platform. This allows parent organizations to manage and monitor their child organizations efficiently, providing streamlined operations and greater control across multiple environments.

Feature Support

Multi-Org management provides a central portal from which you can manage functionality for other organizations including:

  • Identity and access management

  • Navigation between managed organizations

  • Audit event visibility

Licenses

To access Multi-Org management features, you must have a multi-license multi-org (MLMO) subscription. For more information, contact your Exabeam account representative.

Permissions

To manage Multi-Org features, you must be assigned a role with the appropriate Multi-Org permissions. You can either use a default role that includes these permissions or create a custom role with the specific permissions to Manage organizations.

To view and manage a Multi-Org deployment, you must be assigned one of the following roles:

  • Administrator default role

  • Custom role with View and manage Multi-Org permissions

For read-only access, you must be assigned one of the following roles:

  • Default role:

    • Administrator

    • Security Engineer

    • Tier 3 Analyst

    • Tier 2 Analyst

    • Tier 1 Analyst

    • Compliance Manager

    • Developer

  • Custom role with View Multi-Org permissions

The following table displays details about the permissions required to manage organizations.

Application

Platform

Permission

Permission Description

Access

Manage Organizations

New-Scale

Manage Organizations

View Multi-Org

Read

Manage Organizations

New-Scale

Manage Organizations

View and manage Multi-Org

  • Read

  • Write

  • Delete

For more information, see User Permissions.

Regions

Multi-Org is available for all supported regions. However, data residency and processing requirements require all child and parent subscriptions within the same region.