---
title: "Multi-tenant support for metrics-generator | Grafana Enterprise Traces documentation"
description: "Configure multi-tenant support for metrics-generator"
---

> For a curated documentation index, see [llms.txt](/llms.txt). For the complete documentation index, see [llms-full.txt](/llms-full.txt).

# Multi-tenant support for metrics-generator

Multi-tenancy is supported in the metrics-generator through the use of environment variables and per-tenant overrides. This is useful when you want to propagate the multi-tenancy to the metrics backend, keeping the data separated and secure.

## Requirements

- GET version 2.4.0 or later

## Usage

To use this feature, you need to define the `remote_write_headers` override for each tenant in your configuration. You can also use environment variables in your configuration file, which expands at runtime. To make use of environment variables, you need to pass the `--config.expand-env` flag to GET.

Example:

YAML ![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```yaml
overrides:
  team-traces-a:
    metrics_generator:
      processors: [ 'span-metrics' ]
      remote_write_headers:
        Authorization: ${PROM_A_BASIC_AUTH}
  team-traces-b:
    metrics_generator:
      processors: [ 'span-metrics', 'service-graphs' ]
      remote_write_headers:
        Authorization: ${PROM_B_BEARER_AUTH}
```

Bash ![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```bash
export PROM_A_BASIC_AUTH="Basic $(echo "team-a:$(cat /token-prometheus-a)"|base64|tr -d '[:space:]')"
export PROM_B_BEARER_AUTH="Bearer $(cat /token-prometheus-b)"
```

In this example, `PROM_A_BASIC_AUTH` and `PROM_B_BEARER_AUTH` are environment variables that contain the respective tenants’ authorization tokens.

The `remote_write_headers` override specifies the `Authorization` header for each tenant.

The `Authorization` header authenticates the remote-write request to the Prometheus remote write endpoint.
