Managing Multiple-Organization Accounts

Managing Multiple-Organization Accounts

It is possible to manage multiple child-organizations from one parent-organization account. This is typically used by Managed Service Providers that have customers which should not have access to each others' data. Users can be added to the parent-organization and/or multiple child-organizations and switch between them from the user account settings menu. The parent-organization can view the usage of individual child-organizations, allowing them to track trends in usage.

Account settings, such as allow-listed IP addresses, are not inherited by child-organizations from their parent-organization.

The Multi-organization Account feature is not enabled by default. Contact Datadog support to have it enabled.

Here’s a two-minute video walkthrough:


Child organizations

Create

  1. After the feature is enabled, see the New Account Page.
  2. Enter the name of the child-organization you wish to create and click the Create button. The child-organization name cannot exceed 32 characters.

The new child-organization inherits the parent-organization’s plan and is added to the parent-organization’s billing account. If you want to update the child-organization’s billing, contact your sales representative.

Content

Onboarding a new sub-organization with a set of baseline dashboards and monitors can be done programmatically with the Datadog API and tools such as Terraform, see Managing Datadog with Terraform. Additionally, scripts can be used to backup existing dashboards and monitors as code.

Custom sub-domains

The custom sub-domain feature is not enabled by default. Contact Datadog support to have it enabled.

If you are a member of multiple organizations, custom sub-domains help you identify the source of an alert or notification. Also, they can immediately switch you to the organization associated with the sub-domain.

For example, the URL https://app.datadoghq.com/event/event?id=1 is associated with an event in Organization A. If a user is a member of both Organization A and Organization B, but is viewing Datadog within the context of Organization B, then that URL returns a 404 Not Found error. The user must switch to Organization A using the user account settings menu, then revisit the URL. However, with custom sub-domains, the user could navigate to https://org-a.datadoghq.com/event/event?id=1 which would automatically switch the user’s context to Organization A and display the correct page.

Note: If you have a custom Datadog subdomain, manually edit the links from the Datadog documentation with your subdomain name. For example, a link redirecting to https://**app**.datadoghq.com/account/settings becomes https://**<custom_sub-domain_name>**.datadoghq.com/account/settings.

Set up SAML

SAML setup is not inherited by child-organizations from the parent-organization. SAML must be configured for each child-organization individually.

To configure SAML for multi-organizations:

  1. Create a new organization as a different user, with a different username/password.
  2. Invite SAML users.
  3. Login as a SAML user and set SAML.

Multi-org usage

The parent-organization can view the total and billable usage of all their organizations (child and parent organizations) by hovering over their username at the bottom left and then navigating to: Plan & Usage–> Multi-Org Usage.

The Multi-Org Usage page shows the aggregate usage of the parent-organization and all its child-organizations. There are two tabs on the Multi-Org Usage page:

  • Overall
  • Individual Organization

Overall usage

This tab contains a Month-to-Date Total Usage section and an Overall Usage section.

The Month-to-Date Total Usage section summarizes your month-to-date usage of hosts, containers, custom metrics, and any other part of the platform you’ve used during the month, across your parent-organization and all its child-organizations.

Most accounts by default can view “Billable” usage, which shows usage that contributes to your final bill. This view also breaks out on-demand usage above your commitments and allocations. The “All” view shows you all usage, including non-billable usage such as product trials.

The Overall Usage section shows the monthly aggregate usage across all organizations over the past 6 months. The usage shown here is “All” usage not “Billable” usage, which means it does not adjust for trial periods or other billing changes used to calculate your final bill. This information can be downloaded as a CSV file.

Both the Month-to-Date Total Usage section and the Overall Usage section can be filtered by clicking on product specific sub-tabs. In the “Log Management” sub-tab, you can view the Logs Usage by Index table, which displays your month-to-date and last month’s indexed log usage by:

  • Index name
  • Organization
  • Retention period in days
  • Indexed log count broken down between live and rehydrated logs
  • The index’s contribution percentage to the overall indexed log usage

This data can be downloaded as a CSV file.

Individual organization usage

On the Individual Organization usage tab, you are able to view the usage of your child organizations in either absolute units or as a percent of total usage.

The default view is the “Billable” view, which shows usage that contributes to your final bill. This view removes child organizations that are not billable such as trial organizations, and other adjustments that provide a more accurate summary of what drives your bill. Switch to the “All” view to see the unadjusted, raw usage of your parent-organization and all child-organizations. Both views can be downloaded as a CSV file.

To view the Usage Details of a child-organization, you can click on the child-organization’s name.

Usage attribution

The parent-organization can view the usage of child-organizations by existing tag keys in the Usage Attribution page. Admins can hover over their username at the bottom left, then navigate to: Plan & Usage–> Usage Attribution.

When enabled at the parent-organization level, usage attribution shows usage aggregated across all organizations. This can be useful if you would like to attribute the usage of your child-organizations to certain projects, teams, or other groupings.

Functionalities include:

  • Changing and adding new tag keys (up to three).
  • Accessing monthly usage in both the UI and as a .tsv download (tab separated values)
  • Accessing daily usage in a .tsv file for most usage types.

Usage attribution can also be enabled at the child-organization level. When enabled at this level, the tags are only applied to that specific child-organization and can only be viewed in that child-organization. Tags applied at the child-organization level do not rollup and cannot be viewed in the parent-organization.

Note: the following usage types are not supported in this tool:

  • Indexed Log Events
  • Ingested Logs
  • Indexed Spans

Note: Indexed Spans were formerly known as Analyzed Spans and renamed with the launch of Tracing Without Limits on October 20th, 2020.

Usage Attribution is an advanced feature included in the Enterprise plan. For all other plans, contact your account representative or success@datadoghq.com.

Further Reading