Designate a Parent Tenant in Security Center

To see security information for multiple tenants, designate a parent tenant to show data collected from that parent tenant and all connected child tenants. You can disconnect child tenants at any time. And you can group parent and child tenants based on their security policies or regulations.

Available in: Lightning Experience

Available in: Enterprise, Performance, and Unlimited Editions with the Security Center add-on license.

Available for free in: Developer Edition

User Permissions Needed
To view Security Center pages and manage app configurations:	Manage Security Center (in parent and child tenants)
To complete the parent tenant and child tenant connection process:	API Enabled AND View Setup and Configuration AND View Roles and Role Hierarchy

Note This content relates to Security Center. Read about Security Insights, Data Classification, and Who Sees What Explorer in Own from Salesforce.

Security Center is an application built on the Lightning Platform infrastructure. You can configure Security Center to copy customer data from a child tenant in one data center and then store the copied data in the parent tenant data center. You can connect child tenants in sandbox and production to a parent tenant in production. If a parent tenant is set up in a sandbox, you can only connect child tenants in sandboxes. Ensure that the Security Center license is enabled in parent and child tenants. The user permissions required are the only ones needed, and more sensitive permissions such as Modify All Data are not required. Contact your account team for assistance. Because Security Center surfaces sensitive information, we recommend that you enable multi-factor authentication for all Security Center users.

Note The user and the user permissions are only necessary during the initial setup. After setup, they can be removed or the user can be deactivated, since Security Center relies on system processes to move data from the child tenant to the parent tenant.

1. From the App Launcher in the tenant where you want to view aggregated security data, select Security Center.
2. On the Connected Tenants tab, if the parent tenant is in production, click Connect Production Environment or Connect Sandbox Environment. If the parent tenant is in a sandbox, click Connect Tenant.
3. On the login screen, enter the credentials for the child tenant that you want to connect. Child tenant credentials must be for a user who has these permissions: Manage Security Center, API Enabled, View Setup and Configuration, plus View Roles and Role Hierarchy.
4. Click Log In.
5. Salesforce asks you to confirm your authenticated connection. Click Allow.
   The parent tenant is created and the Connected Tenant page shows the details of the child tenant that you added.

   The Security Center app updates data elsewhere in the app only one time per day. Expect to see data from parent and child tenants in the app after the next app update. To ensure that Security Center displays accurate data for all connected tenants, reconnect each sandbox after you refresh it.