Customer reported that they are planning to deploy a multi tenant Sentinel system. They would like to use multi-tier architecture, where they have multiple Sentinel for Log Management servers for storing events and one Sentinel Enterprise Server, from which an user could initiate distributed searches and create reports and correlations.

But they face the following problems with the tenant users:
1) They cannot use distributed searches
2) They cannot create correlations by themselves

Permission options related to above functionalities are not available when creating roles for any tenants other than the 'default' tenant.

Comments