Hi Team,

For context, we have a multi-tenant configuration, and I'm exploring delegating access to some colleagues to manage specific tenant configuration (eg; MFA configuration, Password Policies). If possible, I would like to leverage the existing administration UI.

• Can I grant access to a specific tenant, as opposed to all tenants?

• Is the role with the least permissions allowing tenant configuration, the tenant_manager role?

Thanks,

Hello Team!

What is the tenant role with least permissions I can assign to a user, If I need them to have access to edit specific tenant settings? This appears to be tenant_manager?

Is it possible to create a custom role, or an alternate out of the box role (or configuration), that would provide access to edit only MFA settings, or password settings etc?

@mark-robustelli - Thanks for the response. To clarify/confirm;

• We use FusionAuth for CIAM purposes
• We use Okta for our enterprise authentication requirements.
• When we access the FusionAuth admin ui and other enterprise applications, we configure federations with Okta and our staff use their Okta credentials
• When we access the FusionAuth Account Portal to manage deployments however, we use a FusionAuth Account Portal local username, password, totp

What I would like to do, is for our team members to authenticate with Okta when they need to access the FusionAuth account portal.

Is this possible?

(Sorry if this has been submitted twice)

Hello team!

Quick question, is it possible to configure federated authentication with our enterprise IDP to the FusionAuth Account Portal (not admin UI)?

It appears it's not an option, but wanted to confirm here. Thanks in advance!