Removing Tenants (v4.3.5+)
When you completely remove a tenant from Stellar Cyber, all of its associated objects such as charts, reports, dashboards, connectors, and users are also removed. In previous releases, you were required to review and manually remove each object type before deleting a tenant. This process is now automated, so all the associated objects are deleted for you. As a safety measure, since the delete function is not reversible, a list of objects is displayed for review prior to completing the action.
-
For objects that a tenant is allowed to access but is not the sole user (such as those assigned to All Tenant), the tenant is removed from the object - the object itself is not deleted.
-
When the tenant being removed is the only remaining tenant in a group, that Tenant Group is also removed along with the partner user managing that tenant group.
-
Authentication objects associated with the tenant, such as IdP certificates are also automatically removed when the tenant and its users are removed.
-
Click System | Administration | Tenants. The table of tenants is displayed.
-
Click button on the row for that tenant.
-
A list of objects associated with that tenant is displayed. Note that certain objects are listed as a count, such as assets, rather than by name.
-
Review the list and, optionally, visit the management page for the object to reassign it to another tenant, or All Tenants, or to export it (where applicable).
The delete is not reversible, so review the objects before you proceed.
-
Respond | Automation (ATH playbooks)
-
System | Data Processor | Enrichments
-
-
After you are ready to proceed with the delete, click the button labeled: Yes, permanently remove this tenant.
The tenant is immediately deleted. Associated objects are deleted at the same time, excluding stored data. The data instead is marked for deletion and archived off in the configured retention cycle.