Creating a Sender Invitation

• Console
• CLI
• API

• If you have the correct limits, you can invite another tenancy to join your organization. If the tenancy joins your organization, its subscription will be managed by the parent tenancy.

  See Organization Limits for more information on the limits related to inviting another tenancy.

  The recipient tenancy needs to have the proper permissions to manage subscription sharing in the child tenancy, to accept the invitation. For more information, see Required IAM Policy. The recipient tenancy also needs to be in a home region within the same realm.

  Note
  
  

  Parent tenancies and tenancies that aren't already in a sharing relationship can send invitations. Child tenancies can't send invitations.

  If the invitation is accepted by an authorized user in the recipient tenancy, and the recipient tenancy is subscribed to a Pay As You Go subscription, all usage in the recipient tenancy will be metered against your subscription. To stop sharing your subscription with the recipient tenancy after the invitation has been accepted, you can remap the subscription.

  You can attach governance rules to the invited tenancy during creation, or you can attach rules later. To attach governance rules before sending the invitation, you can create any governance rules first on the Governance Rules page, so they're available for selection during the invite tenancy process.

  Invited tenancies will continue to retain their own distinct service limits. For a limits increase, they can request it through support requests. For more information, see Requesting a Service Limit Increase.

  Important
  
  An invited tenancy (also referred to as the recipient tenancy) is automatically mapped to the default subscription in the organization, so all usage will be computed and charged against the default subscription's rate card . If you don't want the invited, recipient tenancy to consume from the default subscription, you can remap the subscription back to the original subscription after the invited tenancy has joined the organization.

  To invite a tenancy:

  1. Sign in to the sender tenancy (the one that will send the invitation), as a user that has permissions to manage Organization Management functions.
  2. Open the navigation menu and click Governance & Administration. Under Organization Management, click Tenancies.
  3. Click Invite tenancy.
  4. On the Invite tenancy panel, in Invitation name, enter the name of the invite that will be visible to the recipient. Avoid entering confidential information.
     Note
     
     For the invitation name, it can be helpful to use notation that signifies the direction and number of sending invitation attempts. For example, entering a1 to b1 v1 can signify that tenancy a1 is sending an invitation to b1, and v1 as the first try. Such a convention allows the invitations to be more readable to the Console user, without needing to access the invitation details page to view sender and recipient details. See Listing Sender Invitations and Listing Recipient Invitations for more information.
  5. In Recipient tenancy OCID, enter the recipient's OCID. You can find the OCID on the tenancy details page.
  6. In Recipient email, enter and confirm the recipient's email address.
     Note
     
     The recipient needs to have the proper permissions to manage subscription sharing in the recipient tenancy, to accept the invitation. For more information, see Required IAM Policy.
  7. Click Show advanced options and enter any tagging details. See Resource Tags for more information.
  8. Click Next. In the Governance rules step, you can select governance rules to attach to the tenancy, or skip and attach them later. By default, the Require tenancy to join organization governance option is selected for the tenancy. If this option is disabled, a message indicates that have chosen to disable organization governance for this tenancy. To attach governance rules to this tenancy in the future, you will need to request the invited tenancy to use governance rules, and have the tenancy accept (opt in to) the request.
  9. Under Governance rules, if selecting governance rules now, select them from the table. You can filter the table by the rule type (All, Allowed regions, Quota policies, Tags), or the targeted tenancy. For any rule, click the down arrow () to expand the rule entry and view its details.
     Note
     
     Some rules are set by the entire organization, and so such rules are already selected, and can't be disabled.

     Select one or more extra rules and click Next. If you don't select any rules, a message indicates that you have chosen to skip attaching governance rules, but you can still select and attach governance rules later.

  10. Review the summary step to ensure the invited tenancy settings you specified are correct. Tenancy details shows the invitation name and recipient tenancy OCID, while the Governance rules section shows the rule names, rule type, and targeted tenancies if governance rules were attached. Whether rules were attached or not, the Require tenancy to join organization governance field indicates whether the invited tenancy is required to join organization governance with Yes or No. Rules can be created, attached, and detached later.
  11. Click Invite tenancy. The invitation is sent to the tenancy you're inviting to add to your organization, and share its subscription and any governance rules (if selected). A notification is displayed that you have successfully requested to invite a tenancy (with the associated OCID) to join the organization. If the request completes successfully, then the recipient tenancy will receive an invitation to accept. The invitation expires in 30 days.
  12. On the recipient invited tenancy: Open the navigation menu and click Governance & Administration. Under Organization Management, click Invitations.

      On the Invitations page, the invitation from the tenancy that sent the invite is displayed in the Invitations page list. For more information on the Invitations page fields, see Listing Sender Invitations for a sender, and Listing Recipient Invitations for a recipient.

  13. On the recipient invited tenancy: On the Invitations page, click the Actions menu () for the received invitation and select Accept Invitation. An Accept Invitation confirmation message is displayed, which indicates that you're about to accept an invitation from the tenancy.

      By joining the organization, the parent tenancy can manage cost management and reporting (oversee spending), governance rules (create and attach governance rules to the tenancy), and subscription mapping (map and unmap subscriptions to the tenancy).

      After clicking Accept, the invitation is processed, and the invitation's Status field changes to Accepted. The tenancy then becomes a child tenancy under the parent tenancy in the organization.

      After the sharing invitation is accepted, it will take one to two hours for metering to start flowing to the subscription in the parent tenancy. In future, however, all usage in the child tenancy will be metered against the parent tenancy's subscription. In addition, after the new tenancy joins the organization, we recommend that you wait a few hours before creating resources (that is, if you want to be sure that all spending will accrue against the subscription of the parent tenancy).

      If a remaining subscription balance exists, contact your sales representative to move it to a primary subscription in the sending tenancy.

      Note
      
      After the tenancy becomes a child tenancy in the organization, it can't invite another tenancy to become a child tenancy. Also, when a tenancy joins your organization, its subscription is managed by the parent tenancy. To remap a child tenancy back to the original subscription, you can use Subscription Mapping.

  On both the child tenancy's and parent tenancy's Tenancies page, the child tenancy is shown, along with the parent tenancy. On the parent tenancy's Tenancies page, you can view the child tenancy and parent tenancy, and other child tenancies that are being metered against the organization's subscription. The following is shown:

  • Tenancy name
  • Tenancy OCID
  • Status: (Parent tenancy only) Displays the invitation status.
  • Organization governance: Specifies whether the tenancy is using governance rules (Joined) or not (Not joined).
  • Join Date: (Parent tenancy only) The UTC date and time that the tenancy joined and subscription sharing began.

• Use the oci organizations sender-invitation create command and required parameters to create a sender invitation and asynchronously send the invitation to a recipient:

  oci organizations sender-invitation create --compartment-id, -c [text] [OPTIONS]

  For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

• Run the CreateSenderInvitation operation to create a sender invitation and asynchronously send the invitation to a recipient.