Need clarifications regarding Tenant Administrators
This is regarding Pega Multitenancy, In the Multitenancy Administration guide for Pega 715, it is mentioned that there are two kinds of Tenant Administrators ( not 'Multitenant Administrator'),
Tenant proxy Administrator (Which has pxMTAdminProxy priviledge)
Tenant Administrator (Org specific admin for new application created in tenant)
It is mentioned in the document (for 715), that Tenant proxy admin can perform any function that requires or involves elevated privileges and tenant-qualified changes. Like importing a RAP in tenant, creation new applications, new roles etc. Also it is mentioned that Tenant Administrator (non-proxy) has very limited priviledge and that is limited to the application they belong. As per the document Tenant Admin (non-proxy) cannot use import wizard, clipboard, tracer also cannot create new Roles.
However, in Multitenancy Administration guide for Pega 719, there is no mention of tenant 'proxy' Admin and 'pxMTAdminProxy' priviledge. Also there is no mention of the restriction imposed to Tenant Admin (non-proxy). As per the documentation there are two types admins mentioned for Tenant
Tenant Administrator (Created while creation of tenant, it can create new application)
Tenant Org Administrator (Created while creation of new app within tenant, it can also create new application)
We did a POC found that both admins has similar priviledges i.e. they can create new apps, use import wizard, clipboard, tracer also create new Roles.
Does this mean the concept proxy admin (and pxMTAdminProxy priviledge) is longer there from Pega 719? There are two types Administrators present in a Tenant but both the admins have similar priviledges. Is this correct?
You are right! The whole tenant creation process has been simplified starting 7.1.8 (I guess the old roles are unnecessary and somewhat confusing for users). When a tenant is created, only a tenant administrator (an equivalent of OOTB firstname.lastname@example.org for the shared layer) is created with the
Accessgroup – TenantName:Administrators
I could not find any public documentation regarding these changes, I will check with the product owner to see if that is in the plan or not (e.g., a new MT admin guide)