Multi-tenancy dashboards

As part of a multi-tenant environment, the operator wants to provide each customer with a dashboard for their network.

Workflow

Assuming two groups (A and B), each group should have exclusive logins so that only content relating to their group is accessible to their users.

This workflow assumes that each of these groups consists of a location with three network devices sending netflow data:

  • Firewall

  • Core Router

  • Switch

The dashboard should contain a single top conversations report for the group’s network and be accessible to all users under that group/location.

  1. Create a dashboard for each group (e.g., Dashboard A and Dashboard B). This will allow you to export the appropriate reports to them after they have been created.

  2. Create Group A’s report:

    1. Start by adding devices and select the IP addresses of Firewall A, Core Router A, and Switch A.

    2. Select Conversations App (under the Recommended category as the Report Type).

    3. Change the time window/range of the report to Last 24 hours.

    4. After running the report, save it under a name associated with Group A (e.g., Top Conversations A)

    5. Click the share button and select Add to Dashboard.

    6. In the secondary tray, select Dashboard A from the Dashboard Tab dropdown and choose what content to show in the gadget (graph, table, or both).

    Note

    If a different name is entered in the Report Name field, a new, separate Report will be saved. The new name will also be used as gadget label.

  3. Repeat the previous steps using Firewall B, Core Router B, and Switch B, and export the report to Dashboard B.

  4. Set up the Report Folders for each group:

    1. Navigate to Admin > Classic Admin > Reports > Report Folders.

    2. Click the New Folder button and enter a name for Group A’s folder (e.g., Report Folder A).

    3. Add the report that was created for Group A to the folder by selecting it and clicking the <- Add button.

    4. Repeat the steps to create the folder for Group B and add their report to it.

  5. Create a map for each group’s network:

    1. Navigate to Monitor > Network Maps and create a new Spatial Map for Group A (e.g. Map A).

    2. Assign Firewall A, Core Router A, and Switch A as map objects.

    3. Link the devices as necessary using Connections.

    Hint

    The Report previously created for Group A (or any other saved Report) can be used to create a Connection representing that traffic type between devices. These Reports can also be added to dashboards for up-to-the minute display of the traffic covered.

    1. Repeat the steps to create the map for Group B.

  6. Set up the usergroups:

    1. Navigate to Admin > Users and Groups > Usergroups and click the + button to create a new group.

    2. In the tray, enter a name (e.g., Group A Users) and select Guest as the starting template from the dropdown.

    3. After the usergroup has been created, locate it in the main table and click the links under the columns to make the following changes:

    • Devices: Select only Firewall A, Core Router A, and Switch A.

    • Interfaces: Select only interfaces that should be visible to Group A (all interfaces associated with their devices, in most cases)

    • Reports: Select all Reports and Report Folders created for Group A.

    • Dashboard Gadgets: Select only gadgets (based on saved Report names) that were created for Group A.

    1. Repeat the steps to set up the usergroup for Group B.

  7. Navigate to Admin > Users and Groups > User Accounts and click the + button to create login credentials for one or more users for each group. Use the dropdown in the tray to add each user to the appropriate usergroup.

    Hint

    Users obtained from LDAP or another identity provider can also be added to usergroups.

After everything has been set up, users from each group will only have access to the devices/interfaces, reports, and dashboards/gadgets belonging to their group.