Operator Tenancies

Overview

Operator Tenancies allow you to partition an Integriti system so that multiple independent tenants (e.g. different businesses in a shared building) can manage their own users, doors, and entities without seeing or modifying each other’s configuration.

Tenancies are implemented using a combination of Sites and Keywords in Integriti. Sites define entity ownership, while Keywords allow panel-specific entities to be shared. By restricting Operator Types to specific Sites, each tenant only sees and controls their own entities.

This guide walks through a common scenario: a single-controller site with an installer retaining full access and two tenants restricted to their respective permissions.

Prerequisites

• Integriti System Designer with installer-level access.
• An Integriti controller already commissioned under the default site.
• Understanding of Operator Types and Permissions.

Step-by-Step

Create Site Structure

1. The Integriti controller remains under the Default Site (do not move it).
2. In the system tree, create three additional Sites under the controller:
   • Common — for entities shared by all tenants (e.g. primary entry door, entry area).
   • Tenancy 1 — for the first tenant’s exclusive entities.
   • Tenancy 2 — for the second tenant’s exclusive entities.
3. In each Site, create a Keyword with the same name:
   • Under Common → Keyword: Common
   • Under Tenancy 1 → Keyword: Tenancy 1
   • Under Tenancy 2 → Keyword: Tenancy 2

The site tree should resemble:

Default Site
  └── Integriti Controller
        ├── Site: Common
        │     └── Keyword: Common
        ├── Site: Tenancy 1
        │     └── Keyword: Tenancy 1
        └── Site: Tenancy 2
              └── Keyword: Tenancy 2

Create Operators and Operator Types

4. Navigate to Administration → Operator Types and create two new Operator Types (e.g. “Tenant 1” and “Tenant 2”).
5. Navigate to Administration → Operators and create two new Operators, assigning each to its respective Operator Type.

Configure Site Permissions

6. Edit the Tenant 1 Operator Type.
7. Under Site Permissions, limit access to only Common and Tenancy 1 sites.
   • Configure whether the tenant can add Subsites, Keywords, or delete sites as needed.
8. Under Entity Type Permissions, with each site individually selected:
   • Set Allow for the Common site.
   • Set Allow for the Tenancy 1 site.
   • Set Deny for the Default site and Tenancy 2 site.
9. Repeat steps 6–8 for Tenant 2, granting access only to Common and Tenancy 2.

Assign Entities to Sites and Keywords

10. Create or move entities into the appropriate sites:
    • When creating a new entity, highlight the target Site first — the entity will be created under it.
    • To move an existing entity, drag and drop it onto the target Site or Keyword.
11. Users created by a tenant will automatically be assigned to one of their accessible sites (Common or their tenancy).
12. For panel-specific entities that are not site-specific, drag and drop them onto the appropriate Keyword. Since Keywords inherit the Allow permission from their parent Site’s Operator Type settings, tenants gain access to the entity.

Verify Tenant Isolation

13. Log out of the installer account.
14. Log in as Tenant 1.
15. Verify that only entities under Common and Tenancy 1 are visible.
16. Verify that entities under Tenancy 2 and the Default Site are not visible.
17. Repeat for Tenant 2.

Verification

1. Log in as Tenant 1 and confirm:
   • Can create and manage users under Common and Tenancy 1.
   • Cannot see users or doors under Tenancy 2.
   • Cannot see or modify the Default Site.
2. Log in as Tenant 2 and confirm equivalent isolation.
3. Log in as the Installer and confirm full visibility of all sites and entities.
4. Check that common entities (e.g. front door) are visible and usable by both tenants.

Troubleshooting

Symptom	Resolution
Tenant can see other tenant’s entities	Check Entity Type Permissions — ensure the other tenant’s site is set to Deny. Verify entities are correctly placed in the right sites.
Tenant cannot see any entities	Verify the Operator Type’s Site Permissions include the correct sites. Check that Entity Type Permissions are set to Allow for those sites.
Tenant cannot manage panel-specific entities	Drag and drop the entity onto the tenant’s Keyword. Keywords inherit Allow permissions from their parent Site.
Installer can’t see entities created by tenants	Entities are placed under the tenant’s site. Switch to that site in the system tree to view them.

Related Pages

• Integriti Operator Guide — Operator and Operator Type management.
• Integriti System Configuration — System tree and entity organisation.
• Integriti GateKeeper — Daily operator interface.
• Access Levels and Schedules — Permission structure concepts.