No cross-tenant aggregate
There is no portfolio view that combines one customer's data with another's.
FOR MANAGED SERVICE PROVIDERS
Administer many tenants without merging them.
Customer-visible grants are explicit, expiring, and revocable. No query or aggregate spans two managed customers.
Context
The situation
You manage security for a portfolio of customers. You need one place to work from, and your customers need to know you cannot see across them.
Customer-visible grants are explicit, expiring, and revocable. No query or aggregate spans two managed customers. A partner relationship is not a plan: each customer tenant holds one of the four plans.
On this page
What you get from this
Grants the customer can see
Every grant is visible, expiring, revocable, and recorded on both sides.
Apply, don't imply
The partner programme is a relationship over tenants, not a hidden super-admin.
Collection boundary
The boundary
We observe here
A partner principal exists outside a customer's own role set. Revocation is immediate and visible in both audit trails.
We never collect here
Communication content, URLs, paths, query strings, DNS names beyond the registrable domain, headers, cookies, tokens, files, screenshots, form data, keystrokes, usernames, email addresses, hardware serial numbers, or precise location.
Coverage is not complete. Some traffic paths are not observable from the interfaces we use, and geolocation is advisory rather than authoritative.
Availability across plans
Personal
Not included
Pro
Not included
Team
As a managed tenant
Enterprise
As a managed tenant