Skip to main content

Agent Multi-Tenancy

When you generate an Agent API Token within a particular tenant, the agent configured with that token will be assigned to the same tenant. This ensures that agents only process jobs and access data belonging to their assigned tenant, maintaining isolation between tenants (organizations).

Setup​

Prerequisites​

  • Multiple tenants set up in your Istari platform (see setting up multi-tenancy in Zitadel)
  • Admin users in each tenant who can generate API tokens for agents
  • Agents installed on your target machines

Configuration Steps​

  1. Identify Target Tenant: Determine which tenant the agent should belong to
  2. Login as Admin User in Tenant: Ensure you have an admin user in the target tenant
  3. Generate API Token: Create an Agent API Token using the admin user from the target tenant. See the How-To section for instructions on creating an Istari Agent API token.
  4. Configure Agent: Set the token in the agent's istari_digital_config.yaml file. See agent configuration for more detailed instructions.
  5. Verify Assignment: On the Agent Management panel, select the appropriate tenant from the Organization dropdown and verify that the agent appears in the table displayed for that tenant.

Troubleshooting​

Agent isn't picking up jobs​

  • Problem: Agents across tenants have the same module installed, but they are different versions.
    • Solution: If agents across tenants have the same module installed, the modules must all match the latest version published to the Istari Platform. Update agents so they all have the same version of a particular module.