Skip to main content

Organization

An Organization is the top of the Entigo Platform multi-tenancy hierarchy. It gives platform teams a single control point for company-specific configuration, policy, and Workspace management, and provides isolation between companies or independent business units within one company.

What an Organization Provides​

  • Central identity management — Federate authentication with your corporate SAML provider and manage user access across all Workspaces from a single control point.
  • Policies — Set rules and define platform default behaviors that align with your organization's needs and compliance requirements.
  • Control Plane — Central workspace orchestration standardizes Workspace configuration so it deploys and operates consistently across your organization, with centralized management for workspace provisioning, configuration updates, and policy enforcement.
  • Reporting — Comprehensive visibility into platform operations and usage — spanning FinOps and cost management, vulnerability and compliance tracking, and more — to support data-driven decisions across your organization.

Organization in practice

The diagram below shows one organization (mycompany) containing the org-wide services and its workspaces:

  • Org-wide services (Identity, Policy, Control Plane, Reporting) apply across every workspace.
  • Workspaces (business-unit-alpha, N) provide cloud-provider level isolation, each with its own access management, workspace API, and networking.
  • Zones (data-asset-1, N) sit inside a workspace, isolating individual data assets' compute and storage.

Organization mycompany containing org-wide Identity, Policy, Control Plane and Reporting services, above workspaces that each hold zones with their own compute and storage plus workspace-level access management, API and networking

Isolation Beyond the Organization​

Organizations isolate companies and business units. Below that, the platform adds two more levels of isolation:

  • Workspace — cloud-provider level isolation, backed by dedicated data plane services.
  • Zone — logical isolation between data assets within a single Workspace.