> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments/step-2.-create-a-child-tenant.md). # Step 2. Create a child tenant After setting up the main account, you can create child tenants in Cortex Gateway. You can create as many child tenants as you require, subject to your license. * The main account is labeled in Cortex Gateway, but child tenants are not labeled. * Cortex enables parent-child pairing between tenants located in different geographical regions. To enable this capability, contact your support team. * To create a child tenant, ensure that you have Account Admin permissions. In Cortex Gateway, you can view all the available tenants. If you want to create more child tenants than your license permits, contact Customer Support. 1. In the Cortex Gateway, hover over the main account you activated previously until the three-dot menu appears and click Add Child Tenant. 2. Add the following details: | Parameter | Description | | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Child Tenant Name |

Give the Cortex XSIAM tenant an easily recognizable name.

Choose a name that is 59 or fewer characters and is unique across your company account.

| | Region | View the region for the child tenant. | | Child Tenant Subdomain |

Give your Cortex XSIAM instance an easy-to-recognize name that is used to access the tenant directly using the full URL.

https\://\.crtx.\.paloaltonetworks.com

This is a public FQDN, so be careful with sensitive information such as the company name.

After activating a child tenant, you can only change the child tenant subdomain once.

| | Child Units Allocation |

Assign the number of employees and Gigabytes you want to allocate to this child tenant. The amount used and the total amount available to this multi-tenant environment are displayed.

Ensure that you meet the minimum requirements for child tenant allocation.

| | Add Ons | If any license add-ons were purchased with your multi-tenant license, they are listed here. If you acquired compute units (CU) or forensics, you can allocate how many units to allocate to this child tenant. | 3. Confirm approval of the terms and conditions of the privacy policy and click Activate. Activation can take up to an hour. You should receive notification by email that the child tenant has completed the activation process. 4. (Optional) Add another child tenant by repeating steps 1 and 2 or access your newly created tenant. In the Cortex Gateway, under your main account, you can see the total number of tenants you are licensed for and how many you have created. If you reach your limit for child tenants, depending on your license, you may be able to create more tenants. You may be charged for additional tenants. Contact Customer Support if you are approaching your authorized limit. **Child tenant minimum allocations** The following are the minimum number of endpoints , employees and Gigabytes needed in a child tenant. You will not be able to create a child tenant with less than these minimum allocations, nor will you be able to edit your child tenant allocations to have less than these minimum allocations. | Multi-tenant environment | Child tenant minimum allocation | | ------------------------ | ------------------------------- | | MSSP multi-tenant | 100 employees AND 50 Gigabytes. | | Enterprise multi-tenant | 100 employees AND 50 Gigabytes. | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments/step-2.-create-a-child-tenant.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.