---
title: "Multi-tenancy | Grafana Tempo documentation"
description: "Multi-tenancy Tempo is a multi-tenant distributed tracing backend. It supports multi-tenancy through the use of a header: X-Scope-OrgID. This guide details how to setup multi-tenancy."
---

> For a curated documentation index, see [llms.txt](/llms.txt). For the complete documentation index, see [llms-full.txt](/llms-full.txt).

# Multi-tenancy

Tempo is a multi-tenant distributed tracing backend. It supports multi-tenancy through the use of a header: `X-Scope-OrgID`. This guide details how to setup multi-tenancy.

If you’re interested in setting up multi-tenancy, consult the [multi-tenant example](https://github.com/grafana/tempo/tree/main/example/docker-compose/otel-collector-multitenant) in the repo. This example uses the following settings to achieve multi-tenancy in Tempo.

Configure the OTEL Collector to attach the X-Scope-OrgID header on push:

![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```none
exporters:
  otlp:
    headers:
      x-scope-orgid: foo-bar-baz
```

### Grafana 7.5.x and higher

Configure the Tempo data source in Grafana to pass the tenant with the same header:

![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```none
- name: Tempo-Multitenant
  jsonData:
    httpHeaderName1: 'X-Scope-OrgID'
  secureJsonData:
    httpHeaderValue1: 'foo-bar-baz'
```

### Grafana 7.4.x

Grafana 7.4.x has the following configuration requirements:

- Configure the Tempo data source in Grafana to pass the tenant as a bearer token. This is necessary because it is the only header that Jaeger can be configured to pass to its GRPC plugin.

![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```none
- name: Tempo-Multitenant
  jsonData:
    httpHeaderName1: 'Authorization'
  secureJsonData:
    httpHeaderValue1: 'Bearer foo-bar-baz'
```

- Configure Jaeger Query to pass the bearer token to its backend.

![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```none
--query.bearer-token-propagation=true
```

## Important notes

Multi-tenancy on ingestion is currently [only working](https://github.com/grafana/tempo/issues/495) with GPRC and this may never change. It is strongly recommended to use the OpenTelemetry Collector to support multi-tenancy as described above.

## Enabling multi-tenancy

To enable multi-tenancy on Tempo backend, set the following configuration value on all Tempo components:

![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```none
multitenancy_enabled: true
```

or from the command line:

![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```none
--multitenancy.enabled=true
```

This option will force all Tempo components to require the `X-Scope-OrgID` header.