Access On Behalf Of Feature on Tenant Environment

the on behalf of feature enables the management of tenants via sso when a tenant is created in a multi tenant environment without this feature, the tenant admin has to create some users on the tenant environment, or integrate with ldap, to give those users some rights for management purposes administrator users have to create these other users for each tenant, which is undesired and unmanageable using the on behalf of feature, the tenant can easily be managed with only one administrative account the administrator will only have one user on the host system and be able to switch between different tenants to manage them when defining the necessary rights on the tenant side to enable this feature navigate to administration > tenant manager click the tenant's logo at the bottom of the pop up, slide the toggle to the right to enable access on behalf of the tenant after enabling this feature for the tenant, the host admin who manages the tenant needs the necessary rights on the tenant system please refer to the docid 5mu0w rmx 4ye1vhxi0ug for details on how the tenant admin assigns host admin rights