Skip to main content

Tenant Approval Workflow

Tenants are registered by orchestrators and may require Global VSA approval before they become operational. The approval workflow gives SuperAdmins control over which organizations can use the platform.

Tenant Lifecycle​

Every tenant progresses through a defined set of status transitions:

pending_approval ──→ active ──→ suspended ──→ active (reactivated)
        │
        └──→ rejected
StatusDescription
pending_approvalNewly registered by an orchestrator, awaiting SuperAdmin review
activeApproved and fully operational
suspendedTemporarily disabled by a SuperAdmin
rejectedRegistration denied

Approving a Tenant​

  1. Navigate to the tenant detail page. You can reach it from:
    • The Tenants list in the sidebar
    • The Recent Pending Registrations table on the Dashboard
    • The Associated Tenants table on an orchestrator detail page
  2. Review the tenant information: name, ID, orchestrator, and contact email.
  3. Click the Approve button (green, with a checkmark icon).
  4. Confirm the action in the dialog that appears.
  5. The tenant status changes to active, and the orchestrator will receive updated feature flags on its next sync.

Rejecting a Tenant​

  1. Navigate to the tenant detail page.
  2. Click the Reject button (red, with an X icon).
  3. Confirm the action in the dialog.
  4. The tenant status changes to rejected.

Suspending an Active Tenant​

If you need to temporarily disable a tenant that is already active:

  1. Navigate to the active tenant's detail page.
  2. Click the Suspend button (red, with a ban icon).
  3. Confirm the action in the dialog.
  4. The tenant status changes to suspended.
warning

Suspending a tenant does not immediately disconnect their edges. The suspension affects feature flag sync on the next polling interval (up to 5 minutes). During this window, existing edge configurations continue to operate normally.

Reactivating a Suspended Tenant​

  1. Navigate to the suspended tenant's detail page.
  2. Click the Reactivate button (green, with a checkmark icon).
  3. Confirm the action in the dialog.
  4. The tenant status returns to active, restoring full functionality on the next sync cycle.

Important Notes​

  • All status changes require confirmation via a dialog to prevent accidental actions.
  • Status transitions are logged for audit purposes.
  • Only the transitions shown in the lifecycle diagram above are valid. For example, a rejected tenant cannot be directly approved -- it must be re-registered by the orchestrator.