PingOne Privilege

Configuring organizations

Organizations represent logical divisions within your enterprise, such as departments or business units. While users belong to a tenant, cloud resources are scoped to specific organizations.

When a new tenant is provisioned, a default organization is automatically created. The user who signs up for the tenant is assigned the role of Tenant Admin. Users who are members of the admin group in this default organization are automatically granted administrative privileges across all other organizations within the tenant.

The admin console displays user details including their name, role (admin or user), associated organization, and tenant name.

To switch your context to a different organization, use the organization list located in the upper-right corner of the user interface.

Organization administration

Cloud accounts are onboarded into and belong to a specific organization. Users in that organization’s admin group have administrative rights over its assets and members.

An organization admin has the following permissions within their assigned organization:

  • Manage the organization’s admin group

  • Add or delete cloud accounts

  • Manage resources

  • Approve access requests

  • Create policies

  • Configure integrations

  • View audit logs