Meaning in graphics work
A tenant is the organisational scope used to separate one group's private records and actions from another's within shared infrastructure. Its implementation must enforce that separation on the server.
It differs from a website brand, browser filter or presentation theme. Two domains can use the same engine without giving their users access to each other's organisations.
Example and practical consequence
An agency may work for two clients using one account. The engine must still check each client's memberships and object grants before returning artwork, quotations, budgets or search results.
Use stable tenant identifiers and verify scope on every relevant operation, including files, jobs and exports. A browser-local client draft organiser keeps labels distinct but cannot create authenticated tenant protection. Shared operator ownership or a selected brand context must never substitute for the actual private-record authorisation required by the user's organisation.
Take it to the next job
- Verify tenant scope on reads, writes, jobs and file access.