<@U08614ZV82F> Can a single PDP serve authz checks...
# permit-saas
a
@Ask Inkeep Can a single PDP serve authz checks for several permit environments and/or projects?
p
Hey, thanks for reaching out ! It seems our team is a little busy right now, a human will be with you within the next hour or so. In the meantime, can I help you ?
a
Thanks for tagging me @Aden McCusker. I'll look through relevant sources and get back to you shortly.
No, a single PDP instance is scoped to a ​*single environment*​. (1) There are three types of API keys in Permit.io: • ​*Environment API Keys*​ – can access a single environment. Only this type of API key can be used by the PDP container. • ​*Project API Keys*​ – can access a single project and all environments within it. • ​*Organization API Keys*​ – can act on your entire Permit workspace. The PDP container specifically requires an ​*Environment API Key*​, which means each PDP is configured for one specific environment. If you need to serve authorization checks for multiple environments or projects, you would need to run ​*separate PDP instances*​, each configured with its own Environment API Key. For multi-tenant scenarios within a single environment, tenants are handled as first-class citizens within that environment—users and resources are scoped to tenants, but the policy schema remains shared across tenants within the same environment. (2)
To learn more, see the sources I considered: [[1] Using the API](https://docs.permit.io/api/api-with-cli) [[2] Multi-Tenant Authorization](https://docs.permit.io/concepts/multi-tenant-authorization)
d
Hey @Aden McCusker Did the bot answer your question fully?
✅ 1