Creating Child Tenancies

As the parent tenancy, you can create new child tenancies or invite existing tenancies to your organization. Newly created child tenancies consume from your organization's default subscription. If you want the new child tenancy to consume from another subscription, you can remap the created tenancy to another subscription on the Subscription Mapping page.

  • You can attach governance rules to the new child tenancy during creation, or you can come back later and attach rules. To attach governance rules before child tenancy creation, you can create any governance rules first on the Governance Rules page, so they're available for selection during new child tenancy creation.

    Created child tenancies inherit the current default limits of the parent tenancy. Child tenancies receive their own set of limits, which aren't shared with other tenancies.

    Note

    Free Tier or Trial tenancies can't add new child tenancies, or be invited to be part of an organization, unless they're converted to paid first. For more information on upgrading, see Account Upgrade Overview.

    The following table describes the child tenancy creation and invitation actions that can be performed based on pricing model:

    Pricing Model Can Create Tenancies Can Invite Tenancies Can be invited
    Pay As You Go No Yes Yes
    Annual Commit Yes Yes Yes
    Funded Allocation Yes Yes Yes
    Custom Yes Yes Yes
    Trial/Free Tier No No No

    To create a child tenancy, you will be required to provide the necessary information, such as tenancy name and designated administrator email, and then sign-in instructions are provided in an email notification to the child tenancy administrator. The created (child) tenancy automatically consumes from the default subscription of the organization, so all usage is charged based on the rate card  of the subscription. The parent tenancy is also responsible for the child tenancy's usage.

    1. Open the navigation menu and click Governance & Administration. Under Organization Management, click Tenancies.
    2. On the Tenancies page, click Create new tenancy.
    3. In the Create new tenancy panel's Tenancy details step, enter a name for the new child tenancy in Tenancy name.

      The tenancy name must be unique and all lowercase without any special characters. Avoid entering confidential information.

    4. From Home region, select a region from the list. The home region is one of the parent's subscribed regions.
    5. In Administrator email and Confirm Email, enter and confirm the email address of the tenancy administrator.
    6. Click Next. In the Governance rules step, select governance rules to attach to the tenancy, or skip and attach them later. You can always attach or detach rules later, or opt the tenancy out of organization governance in the future if preferred.

      If selecting governance rules now, select them from the table. You can filter the table by the rule type (tag, allowed regions, quotas), or the targeted tenancy. For any rule, click the down arrow (Logging down arrow) to expand the rule entry and view its details.

      Otherwise, if no governance rules are selected, a message indicates that you are choosing to skip attaching governance rules for now.

    7. Click Next.
    8. In the Review summary step, review the new child tenancy settings that you specified are correct. Tenancy details shows the tenancy name, home region, and administrator email, while the Governance rules section shows the rule names, rule type, and targeted tenancies.
    9. Click Create tenancy. A notification is displayed, indicating that you have successfully requested to create a child tenancy. If the request completes successfully, then your authentication credentials are sent by email momentarily.

    The child tenancy administrator receives instructions to activate the tenancy, and set up a password and MFA.

  • Use the oci organizations child-tenancy create command and required parameters to create a child tenancy:

    oci organizations child-tenancy create --admin-email [text] --compartment-id, -c [text] --home-region [text] --tenancy-name [text] [OPTIONS]

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Run the CreateChildTenancy operation to create a child tenancy.