--- title: Creating Tenants in the MSP Portal slug: ps/help/en_us/nsa/22x/msp/ag/1002 docTags: createdAt: 2026-07-22T05:04:33.374Z --- - [Introduction](docId\:X8AFgdvyqWXLifkAcht8i) - [Using the Add New Tenant Workflow](docId\:X8AFgdvyqWXLifkAcht8i) - [Editing the Details of an Existing Tenant](docId\:X8AFgdvyqWXLifkAcht8i) - [License Consumption](docId\:X8AFgdvyqWXLifkAcht8i) - [Blocking/Unblocking a Tenant](docId\:X8AFgdvyqWXLifkAcht8i) ## Introduction This chapter describes how to use the MSP portal to create and edit tenants. Before you begin, make sure you have the following information for a prospective tenant: - The tenant name - The services required (nZTA and/or ICS), including the maximum potential end-user count required in each case - The subdomain you want to configure for the tenant, in the form `https://.pulsezta.net`. - The username and email address of a tenant administrator. This is the individual who can login to the Tenant Admin Portal and configure the *Secure Access Policies* governing access to an organization's applications and resources. To learn more about adding new tenants to the MSP portal, see [Using the Add New Tenant Workflow](docId\:X8AFgdvyqWXLifkAcht8i). To learn more about editing an existing tenant, see [Editing the Details of an Existing Tenant](docId\:X8AFgdvyqWXLifkAcht8i). ## Using the Add New Tenant Workflow To add a new tenant: 1. Log into MSP portal as an MSP Admin, see [Logging into the MSP Portal](docId:4E9V7-viOZ28dkSVGvaaX). 2. From the main Dashboard page, activate the *Add New Tenant* workflow by selecting **Add tenant** from the *All Tenants* panel: :inlineImage[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/f36wyCMSnQr2yJ6caH1U7_dashboard649x399.png" alt caption size="65" width="649" height="399"} The *Add New Tenant* workflow dialog appears: :inlineImage[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/vXLo_oxkVTlr8bEX1K3VA_addnewtenant594x546.png" alt caption size="59" width="594" height="546"} 3. In the *Tenant Details* section: - Enter a **tenant name**. - Use the check boxes to select the services to which this tenant is entitled to access. - For each selected service, enter the **Max Users** allowed to access the service, **Start Date** and **Expiry Date**. This is a soft limit that does not restrict additional users from enrolling to the relevant service. Instead, a tenant exceeding this limit receives a warning in the Tenant Admin Portal enabling them to take action without any reduction in service. Furthermore, the MSP Portal dashboard is updated to indicate to a MSP Admin any tenants that have breached their user limit. - Select **Advanced HTML5 Licenses** and enter the **Value**. 4. In the *Subdomain Information* section: Enter the unique **Subdomain** you want to allocate for this tenant. This forms part of the FQDN to which all users enroll or sign-in their devices. Your tenant FQDN must be unique and unused. To check the availability of the FQDN, enter the **Subdomain** and select **CHECK AVAILABILITY**. nSA presents an error if the domain is unavailable: :inlineImage[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/r8A2tswUO-kSNLSKuOWKI_fqdnnotavail384x52.png" alt caption size="38" width="384" height="52"} :::hint{type="info"} The subdomain should not contain a dot (.). For example: abc.dom.pulsezta.net is not valid as the subdomain \ contains a dot (.). ::: 5. In the *Create Username*\* section: Enter the **Username** of the initial tenant administrator account. 6. In the *Email* section, enter the **Tenant administrator Email** to which you want to send the invitation email. The recipient receives an email containing credentials and a link to login to the *default* Tenant Admin Portal endpoint (based on the subdomain you specify for this tenant, the default endpoint is `https://.pulsezta.net/login/admin`). This includes a one-time use password that must be changed upon login. 7. Make sure your tenant details are correct. A deployed tenant can only be edited to update basic details - the product entitlement and admin account details are not amendable through the MSP Admin Portal. :::hint{type="info"} A Tenant Admin is entitled to modify their administrative user details at any point through the Tenant Admin Portal. For more details, see the Tenant Admin documentation. ::: 8. To create the tenant, select **Create Tenant**. The Dashboard page reappears and your new tenant is added to the All Tenants list with a status of “Initializing”. After the creation process completes, the status updates to “Active”. :::hint{type="info"} This process can take a few minutes to complete. If your tenant status remains as “Initializing” for some time, contact Ivanti Support for help. ::: ## Editing the Details of an Existing Tenant To edit an existing tenant: 1. Log into MSP portal as an MSP Admin, see [Logging into the MSP Portal](docId:4E9V7-viOZ28dkSVGvaaX). 2. From the main Dashboard page, select the checkbox adjacent to a tenant entry in the *All Tenants* panel, then select **Edit**: The *Edit Tenant* dialog appears: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/k4H74PWZ2ohbbzLeOiH2c_edittenant442x536.png" position="flex-start" size="44" width="442" height="536" initialPath="images/edittenant_442x536.png" githubPath="images/edittenant_442x536.png" showCaption="false"} 1. In the *Tenant Details* section, you can edit: - The **Tenant Name** - The **Max Users** amount for each service entitlement - The **Expiry Date** :::hint{type="info"} When editing a tenant, you cannot add or remove subscriptions. ::: 2. To save your changes, select **Save**. ## License Consumption In the main Dashboard page, the License Consumed graph displays license consumption metrics for managed tenants. The graph does not display active user counts. In the main Dashboard page, select **All tenants** from the **Tenants** drop-down list to view cumulative sum of License consumed for all tenants. ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/WsBO7MBSsaYul7a8CreDs_licenseconsumed701x232.png" position="flex-start" size="70" width="701" height="232" initialPath="images/license_consumed_701x232.png" githubPath="images/license_consumed_701x232.png" showCaption="false"} You can select a date range using the option. For each day within the selected date range, the graph plots the Peak License Usage (high watermark) recorded for that day. This provides administrators with insight into maximum license utilization over time. When a date range spanning multiple days is selected, the graph displays the daily high watermark for each day in the selected period. High watermark refers to "maximum license consumption recorded during a measurement period." To view license consumed by a specific tenant, select the tenant from the **Tenants** drop-down list. Select the date range to view daily high watermark for each day in the selected period. ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/JJ9H6MD3G-QujT6-bURUI_licenseconsumedtenant697x432.png" position="flex-start" size="70" width="697" height="432" initialPath="images/license_consumed_tenant_697x432.png" githubPath="images/license_consumed_tenant_697x432.png" showCaption="false"} Below the graph, the page shows the selected tenant's details such as subscriptions, subscription Start Date and End Date, and MSP URL. ## Blocking/Unblocking a Tenant To block a tenant: 1. Log into MSP portal as an MSP Admin, see [Logging into the MSP Portal](docId:4E9V7-viOZ28dkSVGvaaX). 2. From the main Dashboard page, select the check box adjacent to a tenant entry in the All Tenants panel, then click **Block**: :::Paragraph{indent="1"} :inlineImage[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/VE6oF8-hfOmlN1va4uJKI_block472x336.png" alt caption size="47" width="472" height="336"} Blocking a tenant ::: :::hint{type="info"} If a tenant having ICS is blocked, it blocks only the admin access. User access is not blocked and users continue to access the nSA gateways. ::: To unblock a tenant, select the tenant and click **Unblock**.