---
title: Access On Behalf Of Feature on Tenant Environment
slug: kronpam-reference-guide-3-5-0/access-on-behalf-of-feature-on-tenant-environment
description: Learn how to efficiently manage tenants using the On Behalf of feature. With this feature, you can handle multiple tenants seamlessly without the hassle of creating separate user accounts. Simply enable the feature in the Tenant Manager and grant necessar
docTags: 
createdAt: 2022-08-02T19:34:56.000Z
---

The **On Behalf of **feature enables the management of tenants via SSO. When a tenant is created in a multi-tenant environment without this feature, the tenant admin has to create some users on the tenant environment, or integrate with LDAP, to give those users some rights for management purposes. Administrator users have to create these other users for each tenant, which is undesired and unmanageable.


Using the On behalf of feature, the tenant can easily be managed with only one administrative account. The Administrator will only have one user on the host system and be able to switch between different tenants to manage them when defining the necessary rights on the tenant side.


To enable this feature:

1. Navigate to** Administration **>** Tenant Manager**.
2. Click the logo of the tenant.
3. At the bottom of the pop-up, slide the toggle to the right to enable access** On Behalf of The Tenant**.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/v4WQlpCtfdLsV_gGSALkW_image.png" size="50" width="554" height="878" caption="Enable ”Access On Behalf of the Tenant ”  Dialog Box" position="center" showCaption="true"}

After enabling this feature for the tenant, the host admin who manages the tenant needs the necessary rights on the tenant system. Please refer to the section User Management for details on how the tenant admin assigns host admin rights.