Has anyone tried out Citrix CSP DaaS? I've read over the related article, it looks too good to be true, any gotchas/catches? https://community.citrix.com/tech-zone/design/reference-architectures/csp-cvads/

You can't grant administrative access to your clients as the everyone can see every subtenant/customer inside the tenant

I have been running the "Shared Resource Location" design for 4-5 years now. Like Balint said, its okay if you dont want to delegate any access to your customer admin. It works if they are small and you are all inclusive partner, that manage everything for them. Our customer shared everything, netscaler, storefront, AD

Great ! Thank you , I wasn’t even aware of the product until this year

@Balint Oberrauch I did a test, you are able to delegate permission to Citrix Monitor for each customer, as long as each customer have their own delivery group and machine catalog

@Daniel Viklund that's correct. In our case, we would need also to perform machine catalog upgrades ecc for customers --> kind of managed service

its possible to delegate inside manage aswell from what I can see. full access for delivery group and machine catalog, and you only see that scope you are assigned too

Do you see the names of other customers?

No, I only see this customer dg and machine catalog, same with session. I know this was a issue years ago, and after that I havent had a look at it for long time, they might have solved it

I worked also with multi-tenant DaaS, there was the problem when using Premium license with the Premium Monitor (Director) you see all Notifications about high CPU / high Memory usage from all customers, because the notification ignored the customer / group delegations. I don't know if that is fixed now.

Citrix confirmed again over the phone, that you can't grant access to your customers. Additionally, you can't give out API Keys as they're bound to the root tenant and not to the individual org IDs....

Not even access to the Monitor tab only?

That could work, I've asked only for the Administration part.

This discussion is super nice folks, thanks a lot! Especially with the upcoming changes to CSP licensing, where we have to consolidate into DaaS Multi Tenant.

Could be a rumor, but a colleague of mine mentioned that it seems like only 10 Customers are technically possible for each DaaS multi tenant

I have had many many more customers then that under daas multi-tenant "Shared Resource Location" That might different with multi-tenant "Dedicated Resource Location" design