Add a Tenant Controls Setting

Umbrella's Tenant Controls setting control identity access to software as a service (SaaS) applications in the cloud. To control identity access to SaaS applications, add a Tenant Control setting to Umbrella and then select it when adding a Web policy ruleset. Tenant controls must be configured through the Policy Components > Tenant Controls page. Once you have added a Tenant Control setting to the Tenant Controls page, that setting becomes available for selection when configuring Ruleset settings for the Web policy. For more information about the Web policy, see Add a Ruleset to the Web Policy.

You can add a Tenant Controls setting for the following cloud-based applications and suites:

  • Microsoft 365
  • Google G Suite
  • Slack
  • Dropbox.

Each Tenant Controls setting you add can include more than one type of application or suite. For example, you can create a single setting that includes configurations for both Microsoft Office 365 and Slack.

Note: Tenant Controls is available only for the Web policy.


The following data is required to configure Tenant Controls and allow access to cloud-based applications and suites:

For more information, see the application's documentation or contact the application's Support.


  1. Navigate to Policies > Policy Components > Tenant Controls and click Add or expand the default Global Tenant Controls setting.
    Note: Tenant Controls is enabled by default for a ruleset. The ruleset uses the default Tenant Control setting if no other Tenant Control setting is configured for that ruleset.
  1. Give your setting a good descriptive Setting Name.
  2. Select a cloud-based application or suite.
  3. Add application-specific data and domain information to grant access to those applications from within your organization.
    Note: For more information about this data and how to acquire it, see the application's documentation or contact the application's Support.
  • Google G SuiteDomain. See also, G Suite Admin Help. Scroll to "Use a web proxy server to block accounts".
  1. Once you've configured access to applications, click Save.
    This new Tenant Controls setting is now available for selection when you add a ruleset to the Web policy.

Manage Tenant Controls < Add a Tenant Controls Setting > Control Cloud Access to Microsoft 365