Creating and developing a multi-tenant MDR hierarchy
MDR supports the GravityZone multi-tenant hierarchy to organize company accounts. In this model:
Partners can grow and manage their structure within the hierarchy. A Partner’s structure may include:
Other Partner companies, which can also grow their own structures.
Customer companies, which are managed directly by a Partner.
Important
MDR Customers with monthly subscriptions can be managed only by Partners with monthly subscriptions who are MDR resellers enrolled in MDR.
Customers do not grow a structure. They are companies with MDR licenses or subscriptions.
This structure allows Partners to manage both their Customers and other Partners in a clear, nested model.
This article provides guidance on creating the simplest multi-tenant hierarchy, where a non-MSP or MSP Partner enrolled in MDR has a Customer using MDR.
Prerequisites
As a Partner, you need to be enrolled in the MDR service to create your own MDR multi-tenant hierarchy. Follow the steps here to enroll in MDR and access the MDR portal for the first time.
As an MSP Partner, you must have MDR enabled for resale to create other Partners with MDR enabled for resale or Customers with MDR enabled for own use.
Creating a Customer with a yearly MDR license
Once enrolled, you can create your first Customer with a yearly MDR license. Follow the steps from the Creating companies page, considering the specifications below:
On the Company details page, select these options:
The company's Partner can assist with the security management
Customer as a company type
On the Licensing page, select License and then follow the procedure described in Licensing > License. After checking the license key validity, fill in the Contact details for MDR form with valid data.
Creating a Customer with a monthly MDR subscription
As an MSP Partner enrolled in MDR and with MDR enabled for resale, you can create your first Customer with a monthly MDR subscription. Follow the steps from the Creating companies page, considering the specifications below:
On the Company details page, select these options:
The company's Partner can assist with the security management
Customer as a company type
On the Licensing page, select Monthly Subscription and then follow the procedure described in Licensing > Monthly subscription. Either select the Secure Plus or Secure Extra protection models in the Products for own use section, or enable the Managed Detection and Response Foundations option in the Services section.
Customer creation outcome
Upon creation of the company account:
The Customer can access the MDR service page in GravityZone Control Center.
For more information on the Customer's MDR service page, refer to MDR service.
You have visibility into the MDR onboarding status, entitlement period, and service model for the Customer on your MDR service page in GravityZone Control Center.
Note
The Customer's MDR service status will first appear as Onboarding. After a short while, it will change to Active, indicating that they have been successfully onboarded in MDR.
The Customer's account is automatically configured to use SSO authentication using GravityZone IdP. This authentication method enables access to the MDR portal from GravityZone Control Center.
You can oversee and manage the Customer's company from your MDR portal.
Important
The required Antimalware and EDR Sensor modules must be installed on the Customer’s endpoints for MDR monitoring.
Ensure that the policies applied to the Customer’s endpoints follow the minimum recommendations here: GravityZone policy best practices for MDR customers.
Viewing your Customers' information in the MDR portal
To view only the information of your previously created Customer, select their company from the top-right drop-down in the MDR portal.
On the Emergency Contacts page in your MDR portal, if you select the Customer from the drop-down menu, the contact you provided in GravityZone through the Contact details for MDR form will be displayed, labeled with From GravityZone.
