Multi-tenancy

Multi-tenancy support in Bsure Insights

Bsure Insights now supports multi-tenancy, allowing a single, central installation to collect and analyze data across multiple Microsoft Entra ID (Azure AD) tenants.

What this means

With multi-tenancy enabled, you no longer need to deploy and maintain separate Bsure Insights installations in each tenant. Instead:

• One central (main) tenant hosts the Bsure Insights installation.

• A multi-tenant application registration is created in the main tenant.

• This application is granted access to one or more external tenants.

• Bsure Insights securely fetches data from those tenants using the same application identity.

This approach simplifies architecture, reduces operational overhead, and provides a consolidated view across tenants.

How it works (high level)

1. Main tenant setup A multi-tenant app registration is created in the main tenant where Bsure Insights is installed. You need to be Global admin to perform this action under Configuration - Multi-tenancy tab. Click Setup Federation button and you will get this guide:

   
2. Consent in external tenants Each external tenant grants admin consent to the multi-tenant application. This establishes trust and permissions. Click the "Copy admin Concent" button and paste it into a browser holding at least application administrator privileges in the tenant you want to fetch data from. Then add seconday tenant in Bsure Insights configuration to tell wich tenantid and name you ran the concent link.

   
3. Data collection Bsure Insights uses the multi-tenant application to authenticate and fetch data from the connected tenants.

4. Centralized insights Data from all tenants is processed and presented centrally, while still retaining tenant context.

Security considerations

• Access is explicitly granted by each external tenant via admin consent.

• Permissions follow the least-privilege principle required for reporting.

• No persistent credentials are shared between tenants; authentication is handled via Entra ID and application identities.

When to use multi-tenancy

Multi-tenancy is especially useful when:

• You manage multiple Entra ID tenants (e.g. MSPs, enterprises with subsidiaries).

• You want a single pane of glass for identity and application insights.

• You want to minimize duplication of infrastructure and configuration.

Limitations and notes

• All tenants must support the required Microsoft Graph permissions.

• Data visibility is scoped per tenant but aggregated in the same Bsure Insights environment.

• Some reports may require tenant-level context to interpret results correctly.

---

This capability enables Bsure Insights to scale across organizational boundaries while remaining secure, maintainable, and easy to operate.