Tenant Management

Tenant Management

Tenant Management provides centralized control over your SkySaver project. Manage AWS accounts, users, project settings, and access control from a single location.

Overview

SkySaver supports:

  • Multiple AWS Accounts - Connect and manage many AWS accounts from one or more AWS Organizations
  • Multiple Users - Invite team members with appropriate permissions
  • Role-Based Access Control - Fine-grained permissions

Management Areas

AreaDescription
AccountsConnect and configure AWS accounts
UsersInvite and manage team members
Project DefaultsConfigure project-level settings
RBACManage permissions and roles

Navigate to Tenant Management in the main menu. Use the tabs to switch between management areas:

  • Dashboard tab - Project overview: total accounts, users, and capability usage
  • Accounts tab - AWS account configuration and management
  • Users tab - Manage team members and permissions
  • Defaults tab - Project-level settings (tag, regions, services, external ID)

Project Structure

graph TB
    A[SkySaver Project] --> B[AWS Account A]
    A --> C[AWS Account B]
    A --> D[AWS Account C]
    A --> E[User 1]
    A --> F[User 2]
    A --> G[User 3]

    subgraph "AWS Organization 1"
        B
        C
    end

    subgraph "AWS Organization 2"
        D
    end

Key Concepts

Projects

A Project is created during registration and represents your SkySaver subscription. One AWS Marketplace subscription = one project.

Your project can manage AWS accounts from one or more AWS Organizations, making it flexible for various organizational structures.

AWS Accounts

AWS Accounts are connected to SkySaver via IAM roles. Each account can have:

  • Custom tag configurations
  • Specific regional settings
  • Individual automation settings

You can add accounts from multiple AWS Organizations to a single SkySaver project. This is useful if your company uses separate AWS Organizations for different purposes (e.g., production vs. sandbox).

Users

Users are team members invited to use SkySaver. Each user can have:

  • Role-based permissions (RBAC)
  • Email-based authentication

In This Section