Skip to content

docs(operations): Partner tenants are supported from 2.25.0 #331

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Harol-Reina merged 1 commit into from
Oct 4, 2026
Merged

docs(operations): Partner tenants are supported from 2.25.0 #331

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions docs/operations/upgrade-2.25.0.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -302,6 +302,22 @@ while MFA is off.
`/api/v1/partner/revenue`. The Admin, Partner Admin, Partner Billing and Partner Viewer templates carry
it; other users of a Partner tenant get 403.

## Partner tenants are supported from 2.25.0

Partner tenants (resellers who run their own Customers) are recommended from 2.25.0 on. Before it, a
Partner's administrator could impersonate its Customers with write access and keep administrator
permissions after a demotion (the impersonation, revocation and role-change advisories above). Do not
give a third party Partner administrator credentials on 2.24.x or earlier.

Known limitations:

- The host issues the invoice. A Partner generates its Customers' invoices
(`POST /api/v1/partner/customers/{customerId}/invoices/generate`), but only the host's
`POST /api/v1/management/invoices/{id}/issue` issues them.
- The Partner's rate card and the host's base rate card must use the same currency. The Partner's
margin is the difference of the two totals, and no step compares their currencies.
- The console does not yet show the tenant's own logo, favicon or colours.

## Password-reset links and the OIDC redirect URI use the configured public address

Platform.Api no longer builds the password-reset link or the OIDC `redirect_uri` from the request's
Expand Down
Loading