Tenants

A Tenant is the top-level organizational entity in ThingsBoard. Each tenant owns and manages its own devices, assets, dashboards, rule chains, users, and other resources, fully isolated from all other tenants. See Multi-Tenancy & Hierarchy for an overview of the relationships between System Administrator, Tenant, Customer, and User.

---

System Administrators create and manage Tenants from the Tenants page in the sidebar. The list shows each tenant’s title, tenant profile, and creation date, and lets you search by name — from here you can open a tenant to view or edit its details, manage its administrators, or create a new tenant.

---

1. Log in to ThingsBoard as a System Administrator.
2. From the sidebar, navigate to Tenants.
3. Click the + Add tenant in the top right corner.
4. Enter a title (the tenant’s display name).
5. Use the default tenant profile or select a different one.
6. Optionally, provide an address, phone number, contact email.
7. Click Add.

Once created, the tenant becomes available in the tenants list.

---

1. From the sidebar, navigate to Tenants.
2. Click the tenant row to open its details.
3. Click the orange pencil icon (Edit) to enter edit mode.
4. Update the tenant information.
5. Apply changes.

1. From the sidebar, navigate to Tenants.
2. Click the trash icon next to the tenant, or open the tenant details page and click Delete tenant.
3. Confirm the deletion.

---

A Tenant Administrator manages all tenant-scoped entities and configuration for a single tenant — see Roles for the full permission model and Users for general user management within a tenant. All operations are isolated within the tenant context and do not affect other tenants in the system.

1. From the sidebar, navigate to Tenants.
2. In the Tenants list, click Manage tenant admins for the tenant.
3. Click + Add user in the top right corner.
4. Enter the user’s email address. Optionally, provide first and last name, and phone number.
5. Choose the user activation method:
   • Display activation link — generates an activation link that you can copy and share manually.
   • Send activation mail — sends the activation link to the specified email address (requires a configured mail server).
6. Click Add.

After creation, the Tenant Administrator can log in and manage tenant resources.

1. From the sidebar, navigate to Tenants.
2. Click Manage tenant admins for the tenant.
3. Click the Tenant Administrator row to open its details.
4. Click the orange pencil icon (Edit) to enter edit mode.
5. Update the tenant information.
6. Apply changes.

ThingsBoard allows administrators to temporarily block a user’s access to the platform without deleting the account. Disabled users cannot log in or access any tenant resources.

To enable or disable a user account:

1. From the sidebar, navigate to Tenants.
2. Click Manage tenant admins for the desired tenant.
3. Click the User row to open its details.
4. Click Enable/Disable User Account.

Disabling a Tenant Administrator immediately signs them out and blocks further login, but doesn’t affect the tenant’s data — resources remain fully accessible to any other Tenant Administrator on the same tenant.

---

System Administrators can log in as a Tenant Administrator directly from the tenants list by using the Login as tenant admin action.

This is useful for troubleshooting tenant-specific issues and verifying tenant configuration.

---

1. From the sidebar, navigate to Tenants.
2. Click Manage tenant admins for the tenant.
3. Click the trash icon next to the Tenant Administrator user, or open the user details page and click Delete user.
4. Confirm the deletion.

---

To ensure stable and secure multi-tenant deployments:

• Use Tenant Profiles to enforce quotas and prevent excessive resource usage.
• Assign at least two Tenant Administrators per tenant for redundancy.
• Use consistent naming conventions for tenants and customer structures.
• Monitor message throughput and entity limits for each tenant.
• Apply consistent White-labeling per tenant to keep each deployment on-brand.
• Review Security settings — password policy and JWT session limits apply across all tenants.

For enterprise environments with many users sharing devices and dashboards, replace the fixed roles with custom roles and entity groups to scope access to specific subsets of a tenant’s resources instead of the whole tenant.