App instances and organizations

App Instance

An App Instance or Instance is an independent and segregated instance of the ColorTokens' Xshield or Xprotect app. ColorTokens partners and customers can request multiple instances of the ColorTokens apps to cater to their organizational boundaries, such as Line of Business (LoB), geographical location, and company hierarchy.

Instances are fully managed by the Org Admins and Instance Managers (specifically Instance Admins) for the instance. Instances are partially managed by selected roles of Instance Managers (specifically Policy Managers and Asset Managers) for the instance. The User Managers for an instance are privileged to create the users for the instance. See RBAC roles in Spectrum, RBAC roles in Xshield, and RBAC roles in Xprotect for more details.

Organization

An Organization in the ColorTokens Spectrum portal is the top-level container for the Xshield and Xprotect app instances managed by a ColorTokens partner or customer. Instances of ColorTokens apps (Xshield and Xprotect) are added to an organization based on customer or partner requests. A Spectrum organization can help you centrally manage the licenses and users of the instances.

In Spectrum, an organization is primarily managed by the Org Admin for the Organization. The Org Admin adds the first Instance Manager or User Manager to the organization and can thereafter add and remove more users. Org Admins can enable and disable the secure authentication options (Multifactor Authentication (MFA) and Security Assertion Markup Language (SAML)) for the organization and perform all monitoring activities for the organization.

Access organizations and instances

Spectrum users can manage multiple Spectrum organizations and app instances in these organizations. See Access orgs and instances for more details.