Multi-Region PAA Groups

When operating with a single, hosted Policy Authorization Agent within the Authorization Platform, the Cloud Policy Authorization PAA will be used by default.

Because many organization operate in multiple regions across different networks, it is very common for them to create local repositories (databases, user directories, etc.) to improve performance as well as for security reasons. The Authorization Platform's Multi-Region Group functionality can be used to enable organizations to work across multiple regions and networks.

In the Authorization Platform, a single set of Data Models and Views are created for a new PAA. Multiple Policy Administration Agents (PAAs) located in various regions can share this same Data Source, Data Model, Data Model properties, Views and Asset Attribute associations within a PAA Group. In this scenario, the only difference between the PAA Group members is the connection string (which includes the credentials, PI/Server name, Ports, etc.)

When operating with a single, hosted Policy Authorization Agent within the Authorization Platform, the Cloud Policy Authorization PAA will be used by default.

Creating Multi-Region PAA Groups

The process for creating and working in a multi-region configuration includes the following:

1. Create a new PAA, for example, EuropeGB1. This automatically creates a new Multi-Region Group with the same name.

2. Create additional PAAs. Each time you create a new PAA for this Multi-Regional Group, in the Multi-Region field, click the down-arrow and select the name of the PAA Group.

If you are not using PAAs in a multi-region configuration, each time you create a new PAA, you will leave the Multi-Region field blank. Each time you create a new PAA, you have the option to select in which region you wish to include the PAA. If you want to create a new Multi-Region group, leave the Multi-Region field empty and a new group will automatically be created and available for future PAAs to be added.

For more information on creating and adding PAAs, see Managing Policy Authorization Agents. This automatically creates a new Multi-Region Group with the same name.