> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments/step-2.-create-a-child-tenant.md). # Create a child tenant Create Cortex XSIAM child tenants in Cortex Gateway and allocate licensed employee, storage, and add-on resources. Create Cortex XSIAM child tenants in Cortex Gateway after setting up the main account. Allocate licensed employee, storage, and add-on resources to each child tenant. The number of child tenants depends on your license. * The main account is labeled in Cortex Gateway, but child tenants are not labeled. * Cortex enables parent-child pairing between tenants located in different geographical regions. To enable this capability, contact your support team. * To create a child tenant, ensure that you have Account Admin permissions. In Cortex Gateway, you can view all the available tenants. If you want to create more child tenants than your license permits, contact Customer Support. 1. In the Cortex Gateway, hover over the main account you activated previously until the three-dot menu appears and click Add Child Tenant. 2. Add the following details: | Parameter | Description | | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Child Tenant Name |

Give the Cortex XSIAM tenant an easily recognizable name.

Choose a name that is 59 or fewer characters and is unique across your company account.

| | Region | View the region for the child tenant. | | Child Tenant Subdomain |

Give your Cortex XSIAM instance an easy-to-recognize name that is used to access the tenant directly using the full URL.

https\://\.crtx.\.paloaltonetworks.com

This is a public FQDN, so be careful with sensitive information such as the company name.

After activating a child tenant, you can only change the child tenant subdomain once.

| | Child Units Allocation |

Assign the number of employees and the dail y data ingestion (GB/day) you want to allocate to this child tenant. The amount used and the total amount available to this multi-tenant environment are displayed.

Ensure that you meet the minimum requirements for child tenant allocation.

| | Add Ons | If any license add-ons were purchased with your multi-tenant license, they are listed here. If you acquired compute units (CU) or forensics, you can allocate how many units to allocate to this child tenant. | 3. Confirm approval of the terms and conditions of the privacy policy and click Activate. Activation can take up to an hour. You should receive notification by email that the child tenant has completed the activation process. 4. (Optional) Add another child tenant by repeating steps 1 and 2 or access your newly created tenant. In the Cortex Gateway, under your main account, you can see the total number of tenants you are licensed for and how many you have created. If you reach your limit for child tenants, depending on your license, you may be able to create more tenants. You may be charged for additional tenants. Contact Customer Support if you are approaching your authorized limit. ### Child tenant minimum resource allocations The following are the minimum employee and daily data ingestion (GB/day) allocations for each Cortex XSIAM child tenant. You cannot create or update a child tenant below these minimum allocations. | Multi-tenant environment | Child tenant minimum allocation | | ------------------------ | ------------------------------- | | MSSP multi-tenant | 100 employees AND 50 GB/day. | | Enterprise multi-tenant | 100 employees AND 50 GB/day. | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/configure-cortex-xsiam/multi-tenant/onboard-cortex-multi-tenant/onboarding-checklist-for-multi-tenant-central-licensing-deployments/step-2.-create-a-child-tenant.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.