Tenants & Accounts

How multi-tenant isolation works: tenants, accounts, and data boundaries

RPA Watch uses a two-level organizational structure: tenants and accounts. This structure keeps data isolated between teams and clients while allowing centralized management.

Tenants

A tenant is the top-level entity representing your organization. When you register for RPA Watch, a tenant is created automatically.

Tenant Properties

PropertyDescription
NameYour organization's display name
SlugURL-friendly identifier (unique across the platform)
Type
Max AccountsMaximum number of accounts allowed by your license
Max UsersMaximum number of users across all accounts
Max ProcessesMaximum number of processes across all accounts

Tenant Types

TypeUse CaseDefault Limits (Trial)
DirectSingle company monitoring its own automation1 account, 50 users, 500 processes
Consulting BasicConsulting firm managing client automation10 accounts, 100 users, 500 processes
Consulting ProAdvanced consulting with full feature set10 accounts, 100 users, 500 processes


Choose Direct if all your users belong to one organization. Choose Consulting if you manage automation for multiple clients (see [Consulting](/docs/consulting-setup)).

Accounts

An account is an isolated workspace within a tenant. It acts as a boundary for data — processes, jobs, robots, API keys, and schedules all belong to a specific account.

When to Use Multiple Accounts

- Clients: Consulting firms create one account per client

- Environments: Separate production and development data

- Business Units: Large organizations with distinct automation teams

Account Properties

PropertyDescription
NameDisplay name (e.g., "Finance Department")
SlugURL-friendly identifier (unique within the tenant)
The RPA tool used in this account (Robomotion, UiPath, etc.)
ActiveWhether the account is enabled

Creating an Account

Tenant admins can create new accounts:

1. Navigate to Accounts in the sidebar (tenant admin view)

2. Click Create Account

3. Enter the account name and slug

4. Select the RPA tool (can be configured later)

5. Click Create

Each new account starts empty — you'll need to configure RPA credentials, invite members, and either sync or ingest data.

Data Isolation

Data isolation is enforced at the account level:

- Account-scoped users (account_admin, account_user) can only see data in their own account

- Tenant-scoped users (tenant_admin, consultant) can see data across accounts within their tenant

- API keys are scoped to a single account — data ingested via API goes to the key's account

- There is no way for users in one tenant to see data from another tenant

What's Isolated Per Account

ResourceScope
ProcessesAccount
Jobs & Job DetailsAccount
RobotsAccount
SchedulesAccount
API KeysAccount
File AttachmentsAccount (via run)
Audit LogsAccount or Tenant
MembersAccount or Tenant

Checking Account Slug Availability

Before creating an account, you can check if the desired slug is available. Slugs must be unique within the tenant and can only contain lowercase letters, numbers, and hyphens.