Creating Tenants

This guide walks through creating a new tenant and preparing it for use.

Creating a New Tenant

1. Navigate to Tenants in the sidebar
2. Click the Create Tenant button in the top-right corner
3. Fill in the required fields:

Field	Required	Description
Tenant Name	Yes	A descriptive name for the organization (e.g., "Acme Corp")
Contact Email	Yes	Primary contact email for this tenant
Max Devices	No	Maximum number of edge devices allowed (leave blank for unlimited)
Description	No	Optional notes about this tenant

4. Click Save to create the tenant

After creation, the tenant is immediately Active and ready for user and device provisioning.

Post-Creation Steps

Once the tenant exists, you need to assign at least one administrator to manage it:

1. Navigate to Users in the sidebar
2. Click Invite User
3. Enter the administrator's email address
4. Set the user type to TenantAdmin
5. Assign the user to the newly created tenant
6. Click Send Invitation

The invited user will receive an email with a link to set up their Keycloak credentials. Once they accept the invitation, they can log in and begin managing the tenant's resources.

tip

Create the tenant first, then invite a TenantAdmin user and assign them to it. The tenant must exist before you can assign users to it.

What Happens Next

With a tenant created and a TenantAdmin assigned, the tenant administrator can:

• Register edge devices via the bootstrap process
• Configure WireGuard tunnels, ACLs, NAT rules, and routes
• Invite VPN users for client connectivity
• Monitor edge health and network metrics
• Set up edge-to-edge peering for site connectivity