Hierarchy
Tenant
Top-level organization:- Isolation: Complete data isolation between tenants
- Billing: Billing unit
- Settings: Tenant-wide configuration
- Members: Tenant members with roles
Workspace
Logical grouping within a tenant:- Purpose: Organize projects and teams
- Access Control: Workspace-level permissions
- Examples: “Production”, “Development”, “Marketing”
Project
Individual application or service:- Scope: Project-specific resources
- Access Control: Project-level permissions
- Examples: “Web App”, “API Service”, “Mobile App”
Access Control
Three levels of access control:- Tenant Level: Tenant admin, tenant member
- Workspace Level: Workspace admin, workspace member
- Project Level: Project admin, project member
Data Isolation
- Database: Separate databases per tenant
- Network: Network isolation where applicable
- Compliance: Per-tenant compliance settings
- Audit: Tenant-scoped audit logs