Skip to main content

Sharing Card Templates Across a Domain

Domain sharing lets you maintain one Card Template on the Domain main Tenant and make it available to other Tenants in the same Domain. Instead of copying a template into each Tenant and keeping multiple copies in sync, you configure sharing once and all covered Tenants receive the template automatically.

The Template Sharing tab in the card template editor is where you turn this on, choose an access control model, and select which Tenants receive the template.

Required Roles

Saving or changing sharing settings: Super Administrator + Production - Create Layouts task role on the Domain main Tenant.

Tenant picker (listing Domain Tenants): System Admin role on the Domain main Tenant.

Before you start​

The Template Sharing tab only appears on templates that belong to the Domain main Tenant. If you open a card template on a satellite Tenant, the tab is not shown — sharing can only be configured from the Domain main Tenant.

Make sure you are signed in and have selected the Domain main Tenant in the portal before you begin.

Enable domain sharing​

  1. Navigate to Templates → Card Templates.
  2. Open the card template you want to share.
  3. Click the Template Sharing tab.
  4. Turn on Enable Domain Scoping.
  5. Under Access Control Model, select Allowlist (Selective Sharing) or Blacklist (Open Sharing). See Access control models below if you are unsure which to choose.
  6. Select Tenants in the picker:
    • Allowlist: select the Tenants you want to grant access to under Allowed Tenants.
    • Blacklist: select the Tenants you want to exclude under Restricted Tenants.
  7. Click Save. A confirmation dialog describes the impact of the change.
  8. Confirm the change.

The template is now shared with the covered Tenants. Satellite Tenant users can access it without a copy being created on their Tenant.

Access control models​

ModelWho can access the template
Allowlist (Selective Sharing)Only the Tenants you select in Allowed Tenants
Blacklist (Open Sharing)All Domain Tenants except the ones you select in Restricted Tenants

Use Allowlist when you want to limit access to a specific set of Tenants. Use Blacklist when most Tenants in the Domain should receive the template and you only need to exclude a few.

The two lists are mutually exclusive. Switching between models clears the previous selection.

Change or disable sharing​

To change which Tenants have access:

  1. Open the card template and click the Template Sharing tab.
  2. Update the Tenant selection in the picker.
  3. Click Save and confirm the dialog.

To switch access control models (for example, from Allowlist to Blacklist):

  1. Open the card template and click the Template Sharing tab.
  2. Select the other model under Access Control Model.
  3. Update the Tenant selection as needed.
  4. Click Save. The Change Access Control Model dialog appears with an Impact Analysis warning.
  5. Confirm the change.

To disable sharing and return the template to Tenant-only access:

  1. Open the card template and click the Template Sharing tab.
  2. Turn off Enable Domain Scoping.
  3. Click Save. A confirmation dialog warns that sharing will be disabled.
  4. Confirm the change.

A confirmation dialog appears for any change that could disrupt access: enabling sharing, disabling sharing, switching the access control model, or removing Tenants from the covered list.

Limitations​

  • The Template Sharing tab only appears on Card Templates that belong to the Domain main Tenant. Templates on satellite Tenants do not have sharing controls.
  • Allowed Tenants and Restricted Tenants are mutually exclusive based on the active access control model.
  • The Tenant picker shows only active Domain Tenants. Inactive or archived Tenants are excluded.
  • Saving with Allowlist (Selective Sharing) selected but no Tenants chosen is blocked with an error message.
  • Mobile Credential Template sharing is available via API only in this release. Support in the Breeze UI will be added in a future release.

What's next?​