Reviewing the tenancy requirements
In Chapter 9, Technical Overview, Management, and Administration, we briefly introduced what key attributes need to be addressed to support multi-tenancy with Cloud Pak for Data.
In a way, we can relate these requirements to tenancy for applications in traditional operating system environments, albeit at a larger scale. A Unix or Linux system would be set up with all the software needed, and the superuser ("root") has the responsibility of managing this. The root user would authorize users to access that system and assign them to different user groups ("tenants"). The use of trivial filesystem permissions (group IDs and user IDs) enables these users to work together in their tenant group and be somewhat isolated from other tenants. Users could execute and access applications that they (or their group) have been granted access to, and operating system security primitives (such as SELinux and AppArmor) ensure that cross-process...