Skip to main content
The steps in this article apply only to dedicated cluster deployments. Child enterprise provisioning is not available on the standard multi-tenant SaaS platform.
A child enterprise is an isolated sub-tenant provisioned under a parent enterprise. Each child enterprise has its own separate controls, data storage, RBAC, configurations, nodes, and applications. Child enterprises have no access to or knowledge of each other. Diagram showing a parent enterprise with multiple isolated child enterprises beneath it. Service providers and OEMs acting as a parent enterprise can provision child enterprises for their customers using ZCLI. The console displays the resulting child enterprises in the Identity card on the Enterprise Settings page, but provisioning requires ZCLI.

​
Prerequisites

  • You have the sysroot or CSadmin role in your parent enterprise.
  • ZCLI is installed and available. For setup instructions, see the Get Started With ZCLI.

​
Create a child enterprise

​
Configure and log in to the parent enterprise

  1. Configure ZCLI with your parent enterprise credentials:
    Replace <server> with your cluster hostname (for example, zedcontrol.zededa.net), <userid> with your admin username (for example, CSadmin), and <password> with your admin password.
  2. Log in to the parent enterprise:

​
Run the create command

Run the following command to create the child enterprise and its initial admin user:
For example:
The --inherit-auth flag allows the child enterprise admin to log in through the parent enterprise’s authentication URL. The command output confirms that the enterprise is created.
The admin password must be 8–64 characters and include at least one uppercase letter, one number, and one special character.

​
Update a child enterprise

If you created a child enterprise without --inherit-auth and want to add it later, run:
For example:

​
Delete a child enterprise

Deleting a child enterprise cannot be undone. All data, nodes, applications, and users in the child enterprise are permanently removed.
For example:

​
Verify the result

After creating a child enterprise, open the ZEDEDA console as the parent enterprise admin. In the top-right corner, select your initials or avatar, then select Enterprise. On the Settings tab, the Child Enterprises table in the Identity card lists the new child enterprise with its name and Inherit Authentication Profile status. The child enterprise admin can log in at the parent cluster URL using the credentials provided in the create command.

​
Next Steps

Configure Enterprise Settings

Review identity, branding, and security settings for the child enterprise.

Configure Two-Factor Authentication

Enforce 2FA across the child enterprise using the Enforce For Child Enterprise toggle.

Manage Users

Invite additional users to the child enterprise.