:_mod-docs-content-type: ASSEMBLY
[id="olm-multitenancy"]
= Operators in multitenant clusters
include::_attributes/common-attributes.adoc[]
:context: olm-multitenancy

toc::[]

[role="_abstract"]
The default behavior for Operator Lifecycle Manager (OLM) aims to provide simplicity during Operator installation. However, this behavior can lack flexibility, especially in multitenant clusters. In order for multiple tenants on
ifndef::openshift-rosa,openshift-rosa-hcp,openshift-dedicated[]
an {product-title}
endif::openshift-rosa,openshift-rosa-hcp,openshift-dedicated[]
ifdef::openshift-rosa,openshift-rosa-hcp,openshift-dedicated[]
a {product-title}
endif::openshift-rosa,openshift-rosa-hcp,openshift-dedicated[]
cluster to use an Operator, the default behavior of OLM requires that administrators install the Operator in *All namespaces* mode, which can be considered to violate the principle of least privilege.

Consider the following scenarios to determine which Operator installation workflow works best for your environment and requirements.

[role="_additional-resources"]
.Additional resources
* xref:../../operators/understanding/olm-common-terms.adoc#olm-common-terms-multitenancy_olm-common-terms[Common terms: Multitenant]
* xref:../../operators/understanding/olm/olm-understanding-operatorgroups.adoc#olm-operatorgroups-limitations[Limitations for multitenant Operator management]

include::modules/olm-default-install-behavior.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources
* xref:../../operators/admin/olm-adding-operators-to-cluster.adoc#olm-adding-operators-to-a-cluster[Adding Operators to a cluster]
* xref:../../operators/understanding/olm/olm-understanding-operatorgroups.adoc#olm-operatorgroups-membership_olm-understanding-operatorgroups[Install modes types]

include::modules/olm-multitenancy-solution.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources
* xref:../../operators/admin/olm-adding-operators-to-cluster.adoc#olm-preparing-operators-multitenant_olm-adding-operators-to-a-cluster[Preparing for multiple instances of an Operator for multitenant clusters]
ifndef::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[]
* xref:../../operators/admin/olm-creating-policy.adoc#olm-creating-policy[Allowing non-cluster administrators to install Operators]
* xref:../../operators/admin/olm-managing-custom-catalogs.adoc#olm-restricted-networks-operatorhub_olm-managing-custom-catalogs[Disabling the default OperatorHub catalog sources]
endif::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[]

include::modules/olm-multitenancy-colocation.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources

* xref:../../operators/understanding/olm/olm-colocation.adoc#olm-colocation[Multitenancy and Operator colocation]
