What is a Tenant?
Understand what a KC7 tenant is and how it serves as your organization's home base for cybersecurity education
← Back to Understanding Tenants | Home
What is a Tenant?
A tenant is your organization's isolated account within the KC7 platform. When your first event request is approved, the system automatically creates a tenant for your organization. This tenant serves as the top-level container that holds all your classrooms, games, participants, and data.
The tenant provides complete data isolation from other organizations using KC7. Your participant data, analytics, configurations, and content remain entirely separate from other tenants on the platform.
How Tenants are Structured
KC7 uses a hierarchical structure to organize your content:
Tenant (Your Organization)
├── Classrooms (Organizational Units)
│ ├── Games (Module Instances)
│ │ └── Sessions (Participant Engagements)
│ └── Users (Participants & Managers)
└── Analytics (Performance Data)Tenant is your organization's account. This is the top level of the hierarchy and contains everything else. Each tenant has unique branding, configurations, and data that don't interact with other organizations' tenants.
Classrooms are organizational containers within your tenant. You create classrooms to group related games and participants together. For example, you might create separate classrooms for different courses, departments, or time periods. Classrooms help you organize large programs and delegate management to different people.
Games are instances of KC7 modules that participants can access and play. When you create a game, you're deploying a specific KC7 module (like "A Scandal in Valdoria") as a playable experience. Each game has its own settings, participant list, and analytics.
Sessions represent individual participant engagements with games. When a participant plays a game, that creates a session. Sessions are what count toward your tier limits - each game instance you create consumes one session from your quota.
What Your Tenant Provides
Identity and Customization
Each tenant receives a unique identifier (tenant name and UUID) that distinguishes your organization within the KC7 platform. You can customize your tenant's appearance by uploading logos, selecting color schemes, and configuring themes that reflect your organization's branding.
For advanced deployments, KC7 supports custom domain mapping, allowing you to present the platform under your own domain name rather than using the default kc7cyber.com URLs. This is particularly useful for organizations that want to white-label the experience for their participants.
All data within your tenant remains completely isolated from other organizations. Your participant information, game results, and configurations are stored separately and cannot be accessed by other tenants.
Resource Management
Your tenant allows you to create and manage classrooms, which serve as organizational units for grouping related content and participants. The number of classrooms you can create depends on your tier - STARTER tier supports 10 classrooms, while PROFESSIONAL and ENTERPRISE tiers provide higher limits.
You deploy games by creating instances of KC7 modules. Each game you create is a separate, playable version of a module with its own settings and participant list. The platform counts these as "sessions" - STARTER tier tenants can create up to 20 game sessions, with higher tiers providing increased capacity.
The tenant implements role-based access control, allowing you to assign permissions at both the tenant level and classroom level. You can add Tenant Managers who have full access to everything, or Classroom Managers who can only access specific classrooms. This enables you to delegate management responsibilities while maintaining security boundaries.
STARTER tier tenants support up to 100 students total across all classrooms. If you need to support more participants, you can upgrade to PROFESSIONAL (500 students) or ENTERPRISE (unlimited students).
The analytics system provides real-time and historical performance data across all your tenant's resources. You can view individual participant progress, aggregate classroom statistics, and track trends over time.
Data Management
The platform stores all event results and participant data indefinitely. This persistent storage means you never lose access to historical information, even if you stop actively using the tenant for a period of time.
You can track individual participant progress across multiple games and time periods. This longitudinal tracking is valuable for understanding how participants develop skills over time and identifying patterns in learning outcomes.
The analytics system supports aggregate analysis across different time periods, allowing you to compare performance between cohorts, track improvement in your program over time, and identify which challenges are consistently difficult for participants.
You can export data in multiple formats - CSV for spreadsheet analysis, PDF for reports, and JSON for integration with other systems. This export functionality ensures you maintain ownership of your data and can analyze it using external tools.
Roles and Permissions
KC7 uses role-based access control with three permission levels. Each role has specific capabilities and access boundaries designed to support different organizational responsibilities.
Tenant Manager
Tenant Managers have full administrative access across the entire tenant. This is the highest permission level.
What Tenant Managers can do:
Tenant Managers can create, modify, and delete classrooms throughout the tenant. They have unrestricted access to all classrooms regardless of who created them or who else has access to them.
They can manage users at every level - adding people to the tenant, assigning roles, creating Classroom Managers, and removing access when needed. This includes the ability to promote other users to Tenant Manager status or demote existing Tenant Managers.
They have complete visibility into analytics and reporting across the entire tenant. They can view performance data for any classroom, any game, and any participant.
They control tenant-wide configuration including branding, settings, and organizational details that apply across all classrooms.
They can delegate permissions by assigning Classroom Manager roles to specific users for specific classrooms.
Who gets this role:
When your tenant is created, you automatically receive the Tenant Manager role. You can then invite additional Tenant Managers as needed. This role is appropriate for organizational administrators, IT staff, or senior program directors who need full visibility and control.
Classroom Manager
Classroom Managers have administrative access limited to specific classrooms. They can manage everything within their assigned classroom(s) but cannot access other classrooms or tenant-wide settings.
What Classroom Managers can do:
Classroom Managers can create, configure, and delete games within their assigned classroom(s). They control game settings, participant lists, and game-specific configurations.
They can manage users within their assigned classroom(s) - adding participants, removing access, and viewing user lists. However, they cannot add users to other classrooms or assign roles beyond their scope.
They have full access to analytics for their assigned classroom(s), including participant performance, completion rates, and game statistics. They cannot view data from classrooms they're not assigned to.
They can modify classroom-level settings like appearance, description, and organizational details for their assigned classroom(s).
What they cannot do:
Classroom Managers cannot access other classrooms in the tenant. If your tenant has 10 classrooms and they're assigned to 2 of them, those other 8 classrooms are completely invisible to them.
They cannot modify tenant-wide settings, branding, or configurations.
They cannot create new classrooms or delete classrooms they weren't assigned to manage.
They cannot assign roles or change other users' permissions.
Who gets this role:
Tenant Managers assign the Classroom Manager role on a per-classroom basis. This role is appropriate for instructors managing specific courses, department leads overseeing their team's training, or event coordinators responsible for particular programs.
Student/Participant
Students have access only to the games they're enrolled in. They have no administrative capabilities.
What Students can do:
Students can access any game they've been enrolled in. They can play the module, submit answers, and work through challenges.
They can view their own progress, scores, and results. They see which questions they've answered correctly, what hints they've used, and how they rank on leaderboards.
They can complete challenges, earn points, and track their own performance over time if they participate in multiple games.
What they cannot do:
Students cannot see other participants' detailed performance data. While they may see leaderboard rankings showing relative positions, they cannot view other students' specific answers or detailed analytics.
They have no access to classroom management features, cannot create or modify games, and cannot manage other users.
They cannot access tenant or classroom settings, view aggregate analytics, or perform any administrative functions.
Who gets this role:
The platform automatically assigns the Student role when someone joins a classroom or is added to a game. No manual role management is required for typical participant workflows.
How Organizations Use Tenants
Running Single Events
Some organizations use their tenant for just one event and never engage with advanced features. This is completely supported.
If you run a single event, your tenant stores the event data indefinitely without requiring any ongoing management. Participants continue to have access to the game through the link you shared, allowing them to complete challenges at their own pace or review their work later.
You can export results and analytics whenever needed - immediately after the event, weeks later, or months down the line. The data persists regardless of how actively you use the tenant.
No maintenance or administration is required between events. Your tenant simply exists as a container for your event data, ready for you to access when needed.
Running Multiple Events
Organizations running several events find value in tenant features that support repeated usage.
After your first event, you can create additional games directly from your tenant dashboard without requesting approval each time. This streamlines the process of running subsequent events - you simply create a new game, choose a module, and share the link with participants.
You can use classrooms to organize different groups of participants. For example, create one classroom for beginners and another for advanced participants, or separate classrooms for different departments or time periods.
The platform tracks participants across multiple games, allowing you to see who participates repeatedly and how their performance changes over time. This is valuable for understanding participant engagement and skill development.
You can compare performance metrics between different events - which cohort performed better, whether your facilitation improvements led to higher completion rates, or how different modules compare in difficulty.
Managing Long-Term Programs
Organizations running sustained programs use the full range of tenant capabilities.
You can create multiple classrooms segmented by whatever dimensions make sense for your program - audience type, skill level, academic term, department, or program format. Each classroom operates independently with its own games, participants, and settings.
You can establish recurring event schedules with structured curricula. For example, deploy a new game every month for an ongoing training program, or run the same sequence of modules each semester for a course.
The Classroom Manager role allows you to distribute management responsibilities. Assign different instructors or coordinators to manage their own classrooms without giving them access to the entire tenant. This supports larger organizations where different people manage different programs.
You can track individual participants over extended periods, seeing how they progress through multiple games and develop skills over time. This longitudinal view supports assessment of learning outcomes and program effectiveness.
Historical analytics allow you to evaluate your program's performance over time, compare different cohorts or approaches, and make data-driven improvements to your curriculum and facilitation methods.
Accessing Your Tenant
Your tenant dashboard has a unique URL that's provided in your event approval email. The URL follows this format:
https://kc7cyber.com/dashboard/[your-tenant-name]
You can access your tenant dashboard in several ways:
Direct access: Use the link provided in your approval email. Bookmark this URL for easy access in the future.
Via platform login: Go to kc7cyber.com, log in with your account, and select your tenant name from the navigation menu.
Saved bookmark: After your first visit, bookmark your tenant dashboard URL to access it directly without navigating through the main platform.
Tenant Lifecycle
Creation
Tenants are created automatically when your first event request is approved. You don't need to request a tenant separately - the approval process creates both your event and your organizational tenant simultaneously.
Initial Configuration
All new tenants start on the STARTER tier. This tier provides:
10 classrooms maximum
20 game sessions maximum
100 students maximum across all classrooms
Access to all KC7 modules and core platform features
The STARTER tier has no cost and no ongoing requirements. You can use these resources without any maintenance obligations or recurring fees.
Scaling
If your program grows beyond STARTER tier limits, you can upgrade to higher tiers:
PROFESSIONAL tier provides 50 classrooms, 100 game sessions, and 500 students.
ENTERPRISE tier removes all limits, providing unlimited classrooms, sessions, and students.
To upgrade, contact [email protected] with your tenant name and capacity needs. The team will discuss pricing and upgrade options with you.
Organizations running programs aligned with KC7's philanthropic mission may qualify for fee waivers. Mention this when requesting an upgrade.
Data Retention
All data in your tenant persists indefinitely. Event results, participant progress, analytics, and configurations remain accessible regardless of how long it's been since you last used the tenant.
There is no automatic expiration or data purging. Even if you stop using KC7 for months or years, your tenant and all its data remain available when you return.
Closure
If you want to permanently close your tenant and remove all associated data, contact [email protected] with your request. Tenant closure requires manual processing and cannot be reversed, so the support team will confirm your intentions before proceeding.
Tenant Tiers
STARTER Tier
The STARTER tier is assigned to all new tenants by default at no cost.
Capacity limits:
10 classrooms maximum
20 game sessions maximum
100 students maximum across all classrooms
Features: All STARTER tier tenants have access to the complete KC7 module library and all core platform features. The only difference between STARTER and higher tiers is capacity - not feature access.
When STARTER tier works well: STARTER tier provides sufficient capacity for getting started with KC7, running initial events, and exploring platform capabilities. Many organizations find these limits adequate for ongoing programs, particularly smaller educational institutions, community organizations, or companies running departmental training.
PROFESSIONAL Tier
PROFESSIONAL tier is a paid upgrade that provides increased capacity for growing programs.
Capacity limits:
50 classrooms maximum
100 game sessions maximum
500 students maximum across all classrooms
Features: All platform features and modules available in STARTER tier, plus the increased capacity limits.
When to consider PROFESSIONAL: Organizations running multiple concurrent programs, serving several hundred participants, or managing complex organizational structures benefit from PROFESSIONAL tier capacity.
ENTERPRISE Tier
ENTERPRISE tier is a paid upgrade that removes all capacity restrictions.
Capacity limits:
Unlimited classrooms
Unlimited game sessions
Unlimited students
Features: Complete platform access with no restrictions on capacity or usage.
When to consider ENTERPRISE: Large organizations, institutions serving thousands of students, or programs that require unlimited scaling should consider ENTERPRISE tier.
Upgrading Your Tier
To upgrade from STARTER to PROFESSIONAL or ENTERPRISE, contact [email protected]. Provide your tenant name, describe your program's scale and needs, and the team will discuss pricing and upgrade options.
Fee Waivers
Organizations running programs aligned with KC7's philanthropic mission may qualify for fee waivers on upgrade costs. When contacting [email protected] about upgrading, mention your organization's mission and explain how your program serves educational or community goals. The team evaluates waiver requests on a case-by-case basis.
Common Questions
Can one organization have multiple tenants?
Most organizations use a single tenant with multiple classrooms to segment different programs or departments. This approach is simpler to manage and maintains all your data in one place.
If your organization represents truly separate legal entities (for example, a parent company with completely independent subsidiaries), you can request multiple tenants. Contact [email protected] to discuss multi-tenant arrangements and explain your organizational structure.
Do I need to use tenant features to run events?
No. You can run events with minimal tenant interaction.
After your first event is created, you receive a participant link to share and a host dashboard to monitor the event. You can run the event, view results, and export data without ever exploring classroom management, user roles, or other advanced features.
Advanced tenant features exist to support organizations that want to run multiple events, organize complex programs, or delegate management - but they're entirely optional.
How do I transfer tenant ownership to someone else?
Transfer tenant ownership by following these steps:
Invite the new owner to your tenant and assign them the Tenant Manager role
Verify the new owner can access the tenant dashboard and has full Tenant Manager permissions
Remove your own Tenant Manager role (or have the new owner remove it)
This process transfers operational control. The new Tenant Manager has the same full access you had.
If you need formal documentation of the transfer for legal or organizational purposes, contact [email protected]. The support team can provide assistance with documented ownership transfers.
How long is tenant data stored?
All tenant data is stored indefinitely with no automatic expiration.
Your event results, participant progress, analytics, and all other data persist regardless of how actively you use the tenant. If you run an event, then don't use KC7 for a year, your data will still be there when you return.
The platform does not automatically delete or purge data based on inactivity or time periods.
If you want to permanently delete your tenant and all associated data, you must explicitly request closure by contacting [email protected].
Next Steps
Tenant vs Events
Explore Your Dashboard
Add Your First Game
Last updated