Regarding RBAC and Multi Tenacy

[sau sau]

Dear Team,

How are RBAC and Multi Tenacy related? Can I utilize both to create or either one to created isolated space for different customers?

Thank You.

[Stuti Gupta]

Hi Sau,
Hope you are doing great and thank you for using wazuh.

RBAC and multi-tenancy in Wazuh are related in that they can both be used to control access to Wazuh resources. However, they have different purposes.

• Wazuh RBAC is a system that grants access to Wazuh resources based on the roles and policies assigned to individual users or entities. It provides an intuitive administration system for managing permissions to system resources
• Multi-tenancy in the Wazuh dashboard involves creating separate spaces (tenants) for users to save and organize various objects such as index patterns, visualizations, dashboards, etc. It allows for the secure sharing of work among users while providing control over who has access and what level of access they possess.

You can use both RBAC and multi-tenancy to create isolated spaces for different customers. For example, you could:

• Create a separate tenant for each customer.
• Assign a role to each customer that has access to the customer's tenant.
• Use RBAC to control which users have access to the customer's role.
• This would allow each customer to have its own set of data and resources, while also ensuring that only authorized users have access to sensitive data.

You can also use either RBAC or multi-tenancy to create isolated spaces for different customers. For example, you could:

• Use RBAC to create a role for each customer.
• Assign users to the customer's role.
• Use RBAC to control which resources the customer's role has access to.
• This would also allow each customer to have its own set of data and resources, while also ensuring that only authorized users have access to sensitive data.

Which approach you choose will depend on your specific needs. If you need to isolate data and resources for different customers, and you need to have granular control over which users have access to which resources, then using both RBAC and multi-tenancy is a good option. If you only need to isolate data and resources for different customers, then using either RBAC or multi-tenancy is a viable option.

I hope this helps to clarify the relationship between RBAC and multi-tenancy in Wazuh

Regards,