> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/dynamic-license-allocation.md). # Dynamic license allocation In a multi-tenant environment with central licensing management, in Cortex Gateway you can edit child tenant allocations, add child tenants, and delete child tenants. When you delete a child tenant, the tenant's allocations of endpoints and GBs are returned to the main account's pool and can immediately be used for existing child tenants or for creating new child tenants.
Edit tenant allocations You can edit the child tenant allocations by increasing or decreasing the amount of endpoints and GBs allocated to the tenant. The total available count for the multi-tenant environment is updated accordingly. {% hint style="info" %} ### Note Changing the tenant's allocations might result in a short downtime of your tenant. {% endhint %} 1. In Cortex Gateway, locate the main account and then hover over the child tenant until the three-dot menu appears and click **Edit Tenant Allocations**. 2. In the **Edit Tenant Allocations** window, assign the number of Gigabytes and endpoints you want to allocate to this child tenant. The amount used and the total amount available to this multi-tenant environment are displayed. Ensure you meet the [minimum allocation requirements](/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments/step-2.-create-a-child-tenant.md#UUID-620fc264-83c1-0627-ba8a-20548dc809a5_section-idm234529819989674). Click **Done**.
Add a child tenant When you have enough license allocations available in your multi-tenant central licensing environment, you can add a child tenant to the main account in Cortex Gateway. 1. In the Cortex Gateway, hover over the main account you activated previously until the three-dot menu appears and click **Add Child Tenant**. 2. Add the following details: | Parameter | Description | | ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Child Tenant Name |

Give the Cortex XDR tenant an easily recognizable name.

Choose a name that is 59 or fewer characters and is unique across your company account.

| | Region | View the region for the child tenant. The region is inherited from the main account. | | Child Tenant Subdomain |

Give your Cortex XDR instance an easy-to-recognize name that is used to access the tenant directly using the full URL.

https\://\.crtx.\.paloaltonetworks.com

Note

This is a public FQDN, so be careful with sensitive information such as the company name.

After activating a child tenant, you can only change the child tenant subdomain once.

| | Child Units Allocation |

Assign the number of Gigabytes you want to allocate to this child tenant. The amount used and the total amount available to this multi-tenant environment are displayed.

Note

Ensure that you meet the minimum requirements for child tenant allocation.

| | Child Endpoints |

Assign the number of endpoints and/or cloud endpoints you want to allocate to this child tenant. The number of used endpoints and the total number of endpoints available to this multi-tenant setup are displayed.

Note

Ensure that you meet the minimum requirements for child tenant allocation.

| | Add Ons | If any license add-ons were purchased with your multi-tenant license, they are listed here. If you acquired compute units (CU) or forensics, you can allocate how many units to allocate to this child tenant. | 3. 4. Confirm approval of the terms and conditions of the privacy policy and click **Activate**. Activation can take up to an hour. You should receive notification by email that the child tenant has completed the activation process. 5. (Optional) Add another child tenant by repeating steps 1 and 2 or access your newly created tenant. In an enterprise multi-tenant environment, in the Cortex Gateway' under your main account, you can see the total number of tenants you are licensed for and how many you have created.

Note

If you reach your limit for child tenants, depending on your license, you may be able to create more tenants. You may be charged for additional tenants. Contact Customer Support if you are approaching your authorized limit.

Delete a child tenant Deleting a child tenant deletes all of its data and content permanently. The child tenant's license allocations are returned to the total available in the multi-tenant environment and can be allocated to other child tenants. {% hint style="info" %} ### Note In a multi-tenant central licensing management environment, you cannot unpair a child tenant from the main account. The only way to remove the connection to the main account is to delete the tenant. {% endhint %} 1. In Cortex Gateway, locate the main account and then hover over the child tenant until the three-dot menu appears and click **Delete Tenant**. 2. In the **Delete Tenant** window, confirm that you want to delete the child tenant by typing 'Delete' and click **Confirm Deletion**.
--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/multi-tenant/dynamic-license-allocation.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.