Access On Behalf Of Feature on Tenant Environment

the on behalf of feature enables the management of tenants via sso when a tenant is created in a multi tenant environment without this feature, the tenant admin has to create some users on the tenant environment, or integrate with ldap, to give those users some rights for management purposes administrator users have to create these other users for each tenant, which is undesired and unmanageable using the on behalf of feature, the tenant can easily be managed with only one administrative account the administrator will only have one user on the host system and be able to switch between different tenants to manage them when defining the necessary rights on the tenant side to enable this feature navigate to administration > tenant manager click the tenant's logo at the bottom of the pop up, slide the toggle to the right to enable access on behalf of the tenant after enabling this feature for the tenant, the host admin who manages the tenant needs the necessary rights on the tenant system please refer to the docid\ swo3mdyxokciasw ojrbk for details on how the tenant admin assigns host admin rights aioc hide on behalf of tenant switch system config parameter is used in both non host and host tenants for hiding the tenant to switch feature if the parameter is set as true the default value of this parameter is false , which means that until this parameter is set as true, the access on behalf feature is used as in the usual scenario this parameter also affects the desktop client for the tenant switch feature