Per-tenant Subscriptions

A subscription is an optional per-tenant entitlement source. Every tenant already inherits the platform baseline. A subscription lets one tenant be granted more than that baseline without raising what any other tenant gets. Most deployments need no subscriptions at all. The platform baseline, bounded by the signed license, is enough.

How a subscription is applied

A tenant's entitlements start from the platform baseline that every tenant inherits. A subscription is layered on top of it as a tenant addition. Entitlement resolution composes the two:

effective = (platformBaseline ∪ tenantAdditions) ∩ ceiling

A subscription can grant additional features, add command allow or deny rules, and raise quota allowances for its tenant. It is additive within the ceiling. It never removes what the baseline grants except through a deny rule, and it never reaches outside the signed license.

Always bounded by the license

A subscription is always bounded by the signed installation ceiling. The resolver enforces tenant ⊆ ceiling. A subscription that names a feature, command, or quota the signed license does not carry contributes nothing beyond what the ceiling allows. The subscription is a source, not an authority. It can only fill in what the signed license already permits. The signed license stays the hard limit on a deployment, no matter how its tenants are subscribed.

The composition takes the larger of two quota allowances and the union of features and overrides. A subscription is therefore a way to give one tenant a higher cap or an extra capability while the rest of the deployment stays on the baseline.

What a subscription carries

A subscription is scoped to a single tenant and the party it belongs to. It carries:

• a status, one of ACTIVE, SUSPENDED, EXPIRED, or CANCELLED, and an optional validity window;
• the additional features it grants, each with its typed value;
• the command allow and deny rules it contributes;
• the quota allowances it raises;
• optional references to the plan it follows and the billing relationship behind it.

Only an ACTIVE subscription within its validity window contributes to the effective set. A suspended, expired, or cancelled subscription falls away and the tenant is back to the platform baseline.

Where subscriptions fit

• Entitlement Resolution composes a subscription as the tenant-additions source, then caps it to the signed ceiling.
• Features and Products and SKUs define what a subscription's grants reference.
• License, Quota, and Policy covers the quota model a subscription's allowances feed into.