Organization Command Center 3rd party access configuration

The third-party access configuration in the Organization Command Center is now generally available. This feature lets you classify member accounts as internal or external, set the default tenant type for new accounts, and maintain allowed email domains.

Use cases

Imagine you need to control which email domains can access external accounts in your organization and prevent security risks. With this feature, you can:

• Classify member accounts as internal or external.
• Set the default tenant type for new accounts created in the organization.
• Maintain allowed email domain lists to prevent Trust Center security violations.

How to use

You can manage these settings through the Organization Hub interface or using SQL commands from the organization account.

CREATE ACCOUNT my_new_account
  ADMIN_NAME = admin
  ADMIN_PASSWORD = 'StrongPassword123'
  EMAIL = 'admin@mydomain.org'
  TENANT_TYPE = EXTERNAL;

What happens in this code:

1. The CREATE ACCOUNT command starts the creation of a new account within the organization.
2. The admin parameters set up the initial administrative user.
3. The TENANT_TYPE = EXTERNAL parameter marks the new account as an external tenant.

ALTER ACCOUNT my_existing_account SET TENANT_TYPE = INTERNAL;

What happens in this code:

1. The ALTER ACCOUNT command targets an existing account in the organization.
2. The SET TENANT_TYPE clause updates the tenant classification to internal.

Limitations and requirements

• The feature is Generally Available (GA).
• Requires an organization account running Enterprise Edition or higher.
• Interface and command access is restricted to the GLOBALORGADMIN role.