AEM Multi-tenant Website: Restrict cq:tags for User Groups | Community
Skip to main content
BrianKasingli
Community Advisor and Adobe Champion
Community Advisor and Adobe Champion
June 14, 2024

AEM Multi-tenant Website: Restrict cq:tags for User Groups

  • June 14, 2024
  • 1 reply
  • 347 views

AEM Multi-tenant Website: Restrict cq:tags for User Groups

 
by SourcedCode.com (Brian Ka Sing Li)

Overview

Of most common multi-tenant websites, user groups are used to determine what AEM content authors can make changes to. The most popular requirement for a multi-tenant website is the ability to only edit tags for a specific brand. In this case, the way you can achieve this is by permissions. In this blog, we will ensure that all “WKND Members” will be able to create, read, update, and delete nodes under /content/cq:tags/wknd-shared, while these members will not be able to read any other tags listed under /content/cq:tags/*.

 

1 reply

kautuk_sahni
Community Manager
Community Manager
August 20, 2025

@briankasingli Thanks, Brian, for sharing this clear and practical walkthrough with the community. Multi-tenant setups in AEM often bring a lot of complexity around permissions, and your step-by-step approach makes the concept much easier to grasp.

One question that comes to mind: in scenarios where a brand later needs to expand and access multiple tag namespaces (e.g., /content/cq:tags/wknd-shared and /content/cq:tags/wknd-events), would you recommend managing this with additional ACE entries per namespace, or is there a more scalable approach (like leveraging nested groups or patterns) to handle growth without overcomplicating permissions? Curious to hear your thoughts

Kautuk Sahni