# Set up multi-tenancy in Identity Platform

This quickstart shows you how to enable multi-tenancy in Identity Platform and
create and select new tenants using the Google Cloud console.

To learn more about multi-tenancy in Identity Platform, see [multi-tenancy](https://docs.cloud.google.com/identity-platform/docs/multi-tenancy.md.txt).

*** ** * ** ***

To follow step-by-step guidance for this task directly in the
Google Cloud console, click **Guide me**:

[Guide me](https://console.cloud.google.com/?walkthrough_id=identity-platform--multi-tenancy-quickstart)

*** ** * ** ***

## Before you begin

<br />

### Required roles


To get the permissions that
you need to set up multi-tenancy,

ask your administrator to grant you the
[Identity Platform Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/identityplatform.md.txt#identityplatform.admin) (`roles/identityplatform.admin`) IAM role on your project.


For more information about granting roles, see [Manage access to projects, folders, and organizations](https://docs.cloud.google.com/iam/docs/granting-changing-revoking-access.md.txt).


This predefined role contains

the permissions required to set up multi-tenancy. To see the exact permissions that are
required, expand the **Required permissions** section:


#### Required permissions

The following permissions are required to set up multi-tenancy:

- `firebaseauth.configs.update`
- `identitytoolkit.tenants.create`


You might also be able to get
these permissions
with [custom roles](https://docs.cloud.google.com/iam/docs/creating-custom-roles.md.txt) or
other [predefined roles](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#predefined).

## Enable multi-tenancy

1. In the Google Cloud console, go to the **Identity Platform \> Settings** page.  

   [Go to Settings](https://console.cloud.google.com/customer-identity/settings)

2. Click the **Security** tab.

3. In the **Multi-tenancy** section, click **Allow tenants**.

This enables multi-tenancy and opens the **Tenants** page.

You are now ready to create your first tenant.

## Create a tenant

1. In the **Tenants** page, click **Add tenant**.

2. In the **Name** field, enter a name for the tenant.
   This does not need to be unique; Identity Platform automatically
   assigns a distinct ID.

3. Click **Save**.

Congratulations! You've created an Identity Platform tenant.

## Select a tenant

In the **Settings** page, select your tenant from the **Scope to a tenant** list.

Each tenant has its own providers and users. After you've selected a
tenant, you can manage it the same way you manage a non-tenant
Identity Platform project.

## Disable multi-tenancy

To disable multi-tenancy, use the [Identity Toolkit API](https://docs.cloud.google.com/identity-platform/docs/reference/rest/v2/projects/updateConfig.md.txt).

## What's next

- [Sign in users with tenants](https://docs.cloud.google.com/identity-platform/docs/multi-tenancy-authentication.md.txt)
- [Create a sign-in page for multiple tenants](https://docs.cloud.google.com/identity-platform/docs/multi-tenancy-ui.md.txt)
- [Migrate existing users to a tenant](https://docs.cloud.google.com/identity-platform/docs/migrate-users-between-projects-tenants.md.txt)
- [Manage tenants programmatically](https://docs.cloud.google.com/identity-platform/docs/multi-tenancy-managing-tenants.md.txt)