This example Losant Experience demonstrates a three-tier multi-tenant experience. This solution is a simple remote monitoring service provided by the fake telecom company, Kanarra Technologies. Kanarra sells this solution to their industrial OEM customers (Mazak and Hurco). In turn, those OEMs offer the solution to their end customers.
In this example, the end customers are airplane manufacturers (Airbus, Cessna, Boeing, and Gulfstream).
This example demonstrates an inheritance model where members of each tenant (Kanarra, Mazak, Boeing, etc) can only see their devices and any devices below them in the hierarchy. This allows OEMs like Mazak to monitor all of their devices, but each end customer has no access to another end customer's devices.
The image above represents the tenancy hierarchy.
This experience has example users that represent each tenant shown above. You can log in as each
tenant using the email addresses below. The password for every account is qwerty123.
- kanarra-user@example.com
- mazak-user@example.com
- hurco-user@example.com
- airbus-user@example.com
- cessna-user@example.com
- boeing-user@example.com
- gulfstream-user@example.com
The underlying Losant application has 8 total devices. Each end customer (Airbus, Cessna, Boeing, Gulfstream) each have 2 devices. This means when you log in as one of the airplane manufacturers, you will only see your two devices. If you log in as Mazak or Hurco, you will see 4 devices, since you have access to 2 customers with 2 devices each.
After logging in you'll be presented an overview dashboard. Clicking on a device in the list will take you to a detailed dashboard for that device. You can test the access controls by navigating to a device page for one airplane manufacturer and attempting to access the same device page URL when logged in as a different manufacturer.