cross-tenant sharing - ge.com · 2018. 12. 14. · cross-tenant sharing workflow. cross-tenant...

Cross-Tenant Sharing

© 2020 General Electric Company

Contents

Cross-Tenant Overview 1

About Cross-Tenant Sharing 1

Add the Cross-Tenant Permission Set for Existing Tenants 1

Cross-Tenant Sharing Workflow 2

Cross-Tenant Sharing Workflow 2

Cross-Tenant Administrator Actions 4

Grant Cross-Tenant Access 4

Revoke Cross-Tenant Access 4

View Cross-Tenant Access Received 5

Accept or Decline Cross-Tenant Access 5

Access Your Resources Via Search 5

Filter Your Resources Table 6

Sort Your Resources Table 6

Add or Remove Columns from Your Resources Table 7

Freeze or Hide a Column in Your Resources Table 7

Assign Cross-Tenant Resources to a User 8

Cross-Tenant User Actions 9

Access Cross-Tenant Instances 9

Access Cross-Tenant Alerts 9

Access Cross-Tenant Cases 9

Access Cross-Tenant Assets in Analysis 10

Access Cross-Tenant Assets in Dashboards 10

Cross-Tenant Sharing Release Notes 11

Fourth Quarter of 2018 11

ii Cross-Tenant Sharing

Copyright GE Digital© 2020 General Electric Company.

GE, the GE Monogram, and Predix are either registered trademarks or trademarks of All other trademarksare the property of their respective owners.

This document may contain Confidential/Proprietary information of and/or its suppliers or vendors.Distribution or reproduction is prohibited without permission.

THIS DOCUMENT AND ITS CONTENTS ARE PROVIDED "AS IS," WITH NO REPRESENTATION ORWARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TOWARRANTIES OF DESIGN, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE. ALL OTHERLIABILITY ARISING FROM RELIANCE UPON ANY INFORMATION CONTAINED HEREIN IS EXPRESSLYDISCLAIMED.

Access to and use of the software described in this document is conditioned on acceptance of the EndUser License Agreement and compliance with its terms.

© 2020 General Electric Company iii

Cross-Tenant Overview

About Cross-Tenant SharingYou can grant access to enterprises in your tenant and receive access to enterprises from another tenant.

Note: Access to asset resources for the receiving tenant is view only by default. You cannot update ordelete the shared asset resources.

As a granting administrator responsible for one or more enterprises in a tenant, you can:

• Grant view access to one or more top-level enterprises in your tenant to an administrator in anothertenant.

• Revoke access granted to another administrator.• Accept or decline grants received.

As a receiving administrator, you can:

• View an access list of one or more top-level enterprises granted from an administrator in anothertenant.

• Assign access to enterprises and specified children in the hierarchy to your users. Once access isgranted, a user in your tenant can access assets from another tenant.

• Log in to your tenant and access assets from other tenants.

Important:

• Receiving administrators cannot grant access to received asset resources to an additional tenant.• The Cross-Tenant Sharing module is only available to administrators.• You cannot share assets across different GE Digital APM environments (e.g., between pre-prod and

prod).

Cross-Tenant Sharing provides the ability to select asset resources and to grant access to enterprises foranother tenant. Cross-Tenant Sharing is currently limited to granting access only for top-level enterprisesin the hierarchy. See About Permission Sets for more information.

Granting cross-tenant access adds a Tenants column to the Context Browser in GE Digital APM. Thiscolumn includes your own tenant and any additional shared tenants for which you have been grantedaccess.

Selecting a tenant from the Context Browser allows you, as a user, to view the enterprise and child assetsfor which you have been granted access. You can then select and view an item from the Context Browser.

Once granted access to asset resources from one or more tenants, you will be able to read data fromAsset and time series data.

Once granted access to asset resources from one or more tenants, you will be able to:

• Read data from Asset and time series data, Dashboards and Analysis• Plot Analysis charts• Access alerts related to the assets for which you have been granted access permission.• Access cases related to the assets for which you have been granted access permission.

Add the Cross-Tenant Permission Set for Existing TenantsAs an administrator, you can work with the Customer Support team to activate the cross-tenant sharingpermission set for your administrator account.

© 2020 General Electric Company 1

Cross-Tenant Sharing Workflow

Cross-Tenant Sharing WorkflowYou can share enterprise asset resources across tenants.

Once access to one or more enterprises has been granted to you by an administrator in another tenant,you can assign asset resources to users in your tenant. Your users can then access the assigned assetresources through various GE Digital APM modules.

Users can access asset resources and time-series data in:

• Asset Instances• Alerts• Cases• Dashboards• Analysis

Access to enterprise asset resources can be revoked by the granting administrator at any time. Theassigning administrator is responsible for assigning specific enterprise asset resources to users andgroups in their organization.

2 © 2020 General Electric Company

Cross-Tenant Administrator Actions

Grant Cross-Tenant AccessYou can grant enterprise resource access to an administrator in another tenant.

About This Task

When you grant access to an enterprise resource, the administrator must accept before the resources canconnect.

When you grant access to an enterprise resource, the receiving administrator can view the list ofenterprises granted.

Note: When you grant access to assets within your own tenant, it can take up to 30 minutes before thechange takes effect.

Columns for the Your Resources table are shown as follows:

• Resource – The enterprise you have granted or revoked.• Tenant – The tenant for which you have granted or revoked asset resources.• Grant Status – The status of the granted or revoked asset resources.

Procedure

1. Log in as an administrator.2. In the module navigation menu, go to Cross-Tenant Sharing > Grants Given.3. In the User Management page, select Grant Access.

The Security Warning window appears, allowing you to read and agree to share content with anothertenant.

4. Select I Agree to proceed.5. In the Grant Access to Tenant window, do the following:

a) Enter the tenant alias for which you want to grant access in the Tenant Alias box.

Note: The granting administrator must know the tenant alias of the receiving administrator. Thetenant alias is available in the APM application URL. For example, https://apmeg.int-app.aws-usw01-pr.predix.io/tenantalias

b) Select an option from the Select Resource drop-down list.c) Select Grant.

The selected asset resource and tenant appear in the Your Resources table. Grant Status is shown asACCEPTED.

The asset resource and tenant appear in the Your Resources table. Grant Status is shown as GIVEN.

Note: When the grant is accepted by the tenant granted access, Grant Status is shown as ACCEPTED.

Revoke Cross-Tenant AccessYou can revoke access to asset resources granted to an administrator in another tenant.

About This Task

When you revoke access to an asset resource, the receiving administrator and their users will no longerbe able to access the resource.


Note: When you revoke access to assets within your own tenant, it can take up to 30 minutes before thechange takes effect.

Procedure

1. Log in as an administrator.2. In the module navigation menu, go to Cross-Tenant Sharing > Grants Given.3. Find the resource for which you want to revoke access using Search or Table Filters.

4. Hover over the selected resource and select Revoke Access from .5. In the Confirm revocation window, select Confirm.

The Grant Status results on the Your Resources table is shown as REVOKED.

View Cross-Tenant Access ReceivedYou can view a table of asset resources received from an administrator in another tenant.

About This Task

As a receiving administrator, you can view the table of asset resources granted from one or more othertenants.

Columns for the Resources – Shared With You table are shown as follows:

• Tenant - The tenant from which you have received asset resources.• Resource - The enterprise for which you have received access.• Grant Status - The status of the asset resources for which you have received access.

Procedure

1. In the module navigation menu, go to Cross-Tenant Sharing > Grants Received.2. In the User Management page, review the Resources – Shared With You table.

The table shows any asset resources granted from another tenant.

Accept or Decline Cross-Tenant Access

Procedure

1. Log in as an administrator.2. In the module navigation menu, go to Cross-Tenant Sharing > Grants Received.

Access Your Resources Via SearchAs an administrator, you can find specific asset resources by utilizing Search.

About This Task

You can search for asset resources in both the Grants Given and Grants Received pages. You can entermultiple criteria for any of the columns listed in the relevant table.


Procedure

1. Log in as an administrator.

2. In the module navigation menu, go to Cross-Tenant Sharing.

3. Select Grants Given or Grants Received in the sub-navigation menu.

4. In the User Management page, enter criteria into the Search Table box, and then press ENTER.Asset resources in the relevant table are narrowed according to the criteria entered.

Filter Your Resources TableAs an administrator, you can narrow the asset resources in the User Management tables by utilizingfiltering.

About This Task

You can filter the relevanttable in both the Grants Given and Grants Received pages. You can filter usingmultiple criteria for any of the columns listed in the tables. Filter boxes selected appear above therelevant table.

Note: You can remove a selected filter by selecting the X next to the filter.

Procedure




4. In the User Management page, select Table Filters.

5. In the Filter Columns page, do one of the following:

• Select a filter from the list.

• Select .

◦ Select an option from the Attribute drop-down list box.◦ Select an option from the Condition drop-down list box.◦ Enter a value in the Value box, and select Apply.

Asset resources in the relevant table are narrowed according to the filter selected.

Sort Your Resources TableAs an administrator, you can sort the columns in the User Management tables.

About This Task

You can sort multiple columns in the relevant table in both the Grants Given and Grants Receivedpages.

Procedure





4. In the User Management page, select a column header to sort the relevant table by ascending ordescending order.

The arrow next to the column name indicates ascending or descending order. The number 1 appearsnext to the column name, indicating the primary sort order.

5. Optional: Select another column header to add a secondary sort order.The number 2 appears next to the column name, indicating the secondary sort order.

6. Repeat your selection of available column headers to add additional sort orders to the table.

Add or Remove Columns from Your Resources TableAs an administrator, you can add or remove columns from the User Management tables.

About This Task

You can add or remove multiple columns in the relevant table in both the Grants Given and GrantsReceived pages.

Procedure

1. Log in as an administrator.2. In the module navigation menu, go to Cross-Tenant Sharing.3. Select Grants Given or Grants Received in the sub-navigation menu.4. In the User Management page, select an option from the Actions drop-down list.

Check marks indicate a selected column.

The column appears or is removed according to the selections made.

Freeze or Hide a Column in Your Resources TableAs an administrator, you can freeze or hide the columns in the User Management tables.

About This Task

You can freeze or hide multiple columns in the relevant table in both the Grants Given and GrantsReceived pages.

Procedure

1. Log in as an administrator.2. In the module navigation menu, go to Cross-Tenant Sharing.3. Select Grants Given or Grants Received in the sub-navigation menu.

4. In the User Management page, select next to a column header, and then select Freeze Column orHide Column.The column is frozen or hidden according to your selection.


Assign Cross-Tenant Resources to a UserAs an administrator, you can assign cross-tenant asset resources to a user.

About This Task

You must assign asset resources for a granted enterprise to users before they can access those resources.

Before You Begin

• You must have current asset resources granted to your tenant.• If you are an existing tenant, work with the Customer Support team to activate the cross-tenant

sharing permission set for your administrator account.

Procedure

1. Log in as an administrator.2. In the module navigation menu, go to Administration > Users.

3. Hover over a user account and select Edit User from .4. Select Assign Permission Set.

5. Select the Select an asset drop-down list box, hover over <GrantedTenantName> and select todisplay the shared asset resources.

6. While hovering over the displayed asset resource, do one of the following:

• Select to assign all of the displayed asset resources for the selected tenant to the user.

• Select to navigate to the appropriate asset resource for the selected tenant, and then select

to assign the selected asset resource and its child asset resources. You can select multipletimes to navigate to your final selection.

7. Select Assign.8. Select Done.

The user has been assigned asset resources according to your selections.


Cross-Tenant User Actions

Access Cross-Tenant InstancesAs a user, you can access an instance for an asset resource granted to you.

About This Task

Asset resources for another tenant are assigned to you by your administrator after they have beengranted to your organization.

See About Asset Instances for more information about instances.

Procedure

1. In the module navigation menu, go to Assets.2. Select the Context Browser.

The Context Browser appears with Tenants listed in the first column.3. Select the tenant that contains the asset you want to view, then select an asset context.

The selected instance appears.

Access Cross-Tenant AlertsYou can access alerts that belong to another tenant.

About This Task

Asset resources for another tenant are assigned to you by your administrator.

Procedure

In the module navigation menu, go to AlertsV1.Alerts of the same tenant and general visibility alerts of another tenant appears.

You can create a new Alert Inbox filter to narrow the selection.

Access Cross-Tenant CasesYou can access cases that belong to another tenant.

About This Task

Asset resources that belongs to another tenant are assigned to you by your administrator.

Procedure

In the module navigation menu, go to Cases.Cases of the same tenant and general visibility cases of another tenant appears.

You can create a new Case Inbox filter to narrow the selection.


Access Cross-Tenant Assets in AnalysisYou can view assets and create charts in Analysis for another tenant.

About This Task


See Create the Time Series Analysis Charts and Create the Event Data Analysis Charts for moreinformation.

Procedure

1. In the module navigation menu, go to Analysis.2. Select the Context Browser.

The Context Browser appears with tenant names listed in the first column.3. Select the tenant that contains the asset you want to view, then select an asset context.

The selected asset appears.4. View or plot a new chart.

Access Cross-Tenant Assets in DashboardsYou can view and create dashboards in Dashboards for another tenant.

About This Task


See About Accessing Dashboards via the Dashboard Browser and About Dashboard Views for moreinformation.

Procedure

1. In the module navigation menu, go to Tools > GE Dashboards.2. In the Dashboard Browser, select the AllDashboards tab.

Dashboards for all tenants are included in the list.3. Filter the columns to narrow selections in the Dashboards table.4. Select the dashboard you want to view.

The selected dashboard appears.5. View or add cards and new widgets to the dashboard.


Cross-Tenant Sharing Release Notes

Fourth Quarter of 2018

Cross-Tenant SharingThis topic provides a list of product changes released for this module on the dates listed below.

Release Date: December 14, 2018

Table 1: Enhancements and New Features

Description Tracking ID

In your current tenant, you can now view the General Visibility alerts of a shared asset that

belongs to the shared tenant. In addition, you can also add notes and evidences to the alert.• F37660

• F37337

In your current tenant, you can now edit the selected fields of General Visibility cases of a shared

asset that belongs to a shared tenant.

F37330

In your current tenant, you can now view the General Visibility cases of a shared asset that

belongs to the shared tenant.

F37329

You can now access assets from multiple tenants in a single URL:

• Grant view access to one or more top-level enterprises in your tenancy to a tenant

administrator in another tenancy.

• Revoke access granted to another administrator.

• View an access list of one or more top-level enterprises granted from a tenant administrator

in another tenancy.

F33730

You can now activate cross-tenant sharing. F33730

You can now access cross-tenant instances, analysis, and dashboards. F33730

Table 2: Limitations

Description Tracking ID

When you grant or revoke access to assets within your own tenant, it can take up to 30 minutes

before the change takes effect.

N/A

When you select Grants Given or Grants Received, the page does not always display the table

underneath the header. If this occurs, refresh the page to view the table.

DE96620


cross-tenant sharing - ge.com · 2018. 12. 14. · cross-tenant sharing workflow. cross-tenant...

Documents