Skip to content
Docs

Multi-Tenant and Organization Management

Hierarchy: Organization -> Teams -> Tenants/Users -> Model Access/API Keys. Default plan limits: maxUsers (5), maxTeams (3), maxTenants (10), maxApiCallsPerMonth (10K — 0 = unlimited). Tenant features: rate/token limits, budgets, suspend/unsuspend, CSV import, key rotation, feature flags. Super-admin team creation defaults to their own org (Platform) when no org is specified.

15.1 Per-Employee Governance (Individual User Provisioning)

Section titled “15.1 Per-Employee Governance (Individual User Provisioning)”

Every employee gets a first-class identity in the platform — not just a tag for filtering. Per-employee capabilities:

  • Individual employee profile — name, email, department, team, role, status
  • Proxy API key provisioning — issue an ak_… user key scoped to the employee, with their organization’s default model access, budget, and DLP policies inherited
  • Per-employee daily / monthly budgets — independent of team budget, applied as a stricter cap
  • Access pause / resume — temporarily disable an employee’s keys (departure, suspension, investigation) without deleting the audit trail
  • Key rotation — force rotation per employee, with email notification and 7-day overlap window
  • Budget override with expiry — grant headroom for a specific window
  • CSV bulk import — onboard hundreds of employees from an HRIS export
  • Task auto-categorization — every employee’s LLM requests are auto-classified by the gateway into Code / Content / Data Analysis (with extensible categories), so departmental usage reports can answer “how much LLM spend is going into code generation vs. marketing copy vs. analytics this month?”

15.2 Demo Mode

Section titled “15.2 Demo Mode”

For evaluations and POCs, AgentWatch ships with a demo mode that’s on by default for new installations. The DemoModeManager seeds realistic-looking data from src/demo-data/:

  • Employees, teams, organizations
  • Providers (with fake but plausible keys)
  • Audit logs + security events
  • Session history + usage metrics
  • Sample sessions for the Knowledge Center + vector store

This lets a sales engineer or partner stand up AgentWatch and immediately show a working dashboard, audit trail, budget leaderboards, and DLP violations — without needing to wire up real LLM keys first. Demo mode is per-user toggleable (admins can turn it off globally, or individual users can opt out of seeing demo data while preserving the underlying records for other evaluators). Cached for 30 seconds to avoid repeated DB calls. Set DEMO_MODE_DEFAULT=false at install time to disable for production deployments.

15.3 Native Multi-Tenant Isolation

Section titled “15.3 Native Multi-Tenant Isolation”

Each organization is a fully isolated tenant: providers, API keys, model catalogs, employee accounts, teams, budgets, DLP policies, audit trails, and analytics are all tenant-scoped at the database layer (no shared tables, no cross-org leakage paths). A super_admin can view all organizations from a global view; company_admin users see only their own org. This isolation model is foundational — every governance dimension is tenant-scoped, making AgentWatch suitable as a multi-tenant AI gateway SaaS for ISVs, MSPs, or holding-company structures.