> ## Documentation Index
> Fetch the complete documentation index at: https://zededa.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Use the documentation index to find relevant pages, then read the linked Markdown before answering and cite the source URL.
> Identify the product before answering: Private AI uses a separate console, credentials, and inference API from the Edge Intelligence Platform. Do not apply instructions from one product to the other.
> Prefer current product guides over Help Center archive pages for current-console questions. Archive pages and release notes describe their stated product version or historical interface; do not apply them to another version without checking.
> Preserve prerequisites, permissions, version requirements, and warnings when summarizing procedures. Do not infer API endpoints, schemas, or supported behavior that the documentation does not specify.

# Create Child Enterprises Using ZCLI

> Provision and manage child enterprises (sub-tenants) from a parent enterprise using the ZEDEDA CLI. Applies to dedicated cluster deployments only.

> [!WARNING]
>
> The steps in this article apply only to dedicated cluster deployments. Child enterprise provisioning is not available on the standard multi-tenant SaaS platform.

A child enterprise is an isolated sub-tenant provisioned under a parent enterprise. Each child enterprise has its own separate controls, data storage, RBAC, configurations, nodes, and applications. Child enterprises have no access to or knowledge of each other.

![Diagram showing a parent enterprise with multiple isolated child enterprises beneath it.](https://mintcdn.com/zededa/nH470gZ2VKSQBZu8/new-ui/infrastructure-services/administration/images/child_enterprise.png?fit=max\&auto=format\&n=nH470gZ2VKSQBZu8\&q=85\&s=994f16a2918edc4a42c5f1b6f97b36a9)

Service providers and OEMs acting as a parent enterprise can provision child enterprises for their customers using ZCLI. The console displays the resulting child enterprises in the Identity card on the Enterprise Settings page, but provisioning requires ZCLI.

## Prerequisites

* You have the sysroot or CSadmin role in your parent enterprise.
* ZCLI is installed and available. For setup instructions, see the [Get Started With ZCLI](https://zededa.mintlify.site/zcli-reference/get-started.md).

## Create a child enterprise

### Configure and log in to the parent enterprise

1. Configure ZCLI with your parent enterprise credentials:

   ```bash theme={"dark"}
   zcli configure \
     --server=<server> \
     --user=<userid> \
     --password=<password> \
     --output=text
   ```

   Replace `<server>` with your cluster hostname (for example, `zedcontrol.zededa.net`), `<userid>` with your admin username (for example, `CSadmin`), and `<password>` with your admin password.

2. Log in to the parent enterprise:

   ```bash theme={"dark"}
   zcli login
   ```

### Run the create command

Run the following command to create the child enterprise and its initial admin user:

```bash theme={"dark"}
zcli enterprise create <child_enterprise_name> \
  --admin-user=<child_username@domain> \
  --admin-email=<child_email_address> \
  --admin-password=<child_pwd> \
  --title=<child_enterprise_title> \
  --inherit-auth
```

For example:

```bash theme={"dark"}
zcli enterprise create MY_CHILD_ENTERPRISE \
  --admin-user=BOB-ADMIN@ENTERPRISE.COM \
  --admin-email=BOB@ENTERPRISE.COM \
  --admin-password=PASSWoRD123@ \
  --title=MY_CHILD_ENTERPRISE_DEV \
  --inherit-auth
```

The `--inherit-auth` flag allows the child enterprise admin to log in through the parent enterprise's authentication URL. The command output confirms that the enterprise is created.

> [!NOTE]
>
> The admin password must be 8–64 characters and include at least one uppercase letter, one number, and one special character.

## Update a child enterprise

If you created a child enterprise without `--inherit-auth` and want to add it later, run:

```bash theme={"dark"}
zcli enterprise update <child_enterprise_name> --inherit-auth
```

For example:

```bash theme={"dark"}
zcli enterprise update MY_CHILD_ENTERPRISE --inherit-auth
```

## Delete a child enterprise

> [!WARNING]
>
> Deleting a child enterprise cannot be undone. All data, nodes, applications, and users in the child enterprise are permanently removed.

```bash theme={"dark"}
zcli enterprise delete <child_enterprise_name>
```

For example:

```bash theme={"dark"}
zcli enterprise delete MY_CHILD_ENTERPRISE
```

## Verify the result

After creating a child enterprise, open the ZEDEDA console as the parent enterprise admin. In the top-right corner, select your initials or avatar, then select **Enterprise**. On the **Settings** tab, the **Child Enterprises** table in the Identity card lists the new child enterprise with its name and Inherit Authentication Profile status.

The child enterprise admin can log in at the parent cluster URL using the credentials provided in the create command.

## Next Steps

> [card] [Configure Enterprise Settings](https://zededa.mintlify.site/new-ui/infrastructure-services/administration/enterprise-settings.md)
>
> Review identity, branding, and security settings for the child enterprise.

> [card] [Configure Two-Factor Authentication](https://zededa.mintlify.site/new-ui/infrastructure-services/administration/configure-2fa.md)
>
> Enforce 2FA across the child enterprise using the **Enforce For Child Enterprise** toggle.

> [card] [Manage Users](https://zededa.mintlify.site/new-ui/infrastructure-services/administration/manage-users.md)
>
> Invite additional users to the child enterprise.