02 — Capability · BC-1250
Subscription & Tenant Operations
Run the product on a per-customer basis — provision each tenant, control what its plan entitles it to, meter what it uses, move it between plans and regions, and remove it cleanly when it leaves. This is the operational life of a customer inside the product, distinct from selling or invoicing them.
- Tenant Management
- Entitlement Management
- SaaS Operations
- Customer Provisioning
In scope
- Tenant provisioning, configuration and lifecycle through to offboarding
- Plans, entitlements, feature gating and license activation
- Usage metering and the records billing is computed from
- Customer identity integration, data residency and tenant-level data handling
Out of scope
- Invoicing, collections and revenue recognition (see BC-250)
- Pricing and packaging decisions (see BC-470)
- Managing identities and access for the company's own workforce (see BC-760 and BC-780)
Realized by · 0
- No product in the catalog yet.
Used in · 0
- Not yet placed on a value stream.
Build it · 3
- pattern Rate Limiting via BC-1250.30.20
- pattern Federated Identity via BC-1250.40.10
- stack Workforce identity stack via BC-1250.40.10
Decomposes into · 5
- BC-1250.10Tenant Provisioning & LifecycleCreate a working tenant the moment a customer signs, keep its configuration correct through its life, and retire it with its data handled as promised when the relationship ends.
- BC-1250.20Plans & EntitlementsTranslate what a customer bought into what the product lets them do — features, limits, seats and regions — and change it the moment the contract changes.
- BC-1250.30Usage MeteringCount what each tenant consumes accurately enough to bill on, show it to the customer before they are surprised, and keep the record auditable when they dispute it.
- BC-1250.40Customer Identity & Access IntegrationLet each tenant bring its own identity provider, manage its own users and roles, and get an audit trail of who did what inside its tenant.
- BC-1250.50Tenant Data GovernanceKeep each customer's data where it promised to be, separate from everyone else's, retained for as long as agreed and exportable on request.