add multi-tenancy public tutorial

src/content/overview/observability/_index.md

@@ -6,7 +6,7 @@ menu:
   principal:
     parent: overview
     identifier: overview-observability
-last_review_date: 2024-06-06
+last_review_date: 2024-12-11
 owner:
   - https://github.com/orgs/giantswarm/teams/sig-product
 ---
@@ -23,6 +23,8 @@ Observability is a fundamental aspect of modern cloud-native environments, provi
 
 - **Alerting**: To not just look at dashboards all day it's crucial to be able to get notified about significant events or issues that require immediate attention. By making it easy to set up and configure alerting rules across apps and environments, our observability platform's alerting helps your teams avoid wasting time on repetitive tasks, thereby enhancing their efficiency and allowing them to focus on what matters.
 
+- **Multi-Tenancy**: To isolate your observability data between teams or internal organization, Giant Swarm provides you with multi-tenant storage of and access to your observability data.
+
 One of the key benefits using Giant Swarm is that we provide a set of reliable and highly integrated observability tools that our own teams already use on a daily basis and will help you have a comprehensive view of your applications and infrastructure.
 
 ## Cloud-native technologies

src/content/tutorials/observability/data-exploration/accessing-grafana/_index.md

@@ -7,7 +7,7 @@ menu:
     identifier: tutorials-observability-data-exploration-accessing-grafana
     parent: tutorials-observability-data-exploration
 weight: 40
-last_review_date: 2024-07-17
+last_review_date: 2024-12-12
 user_questions:
   - How to access Grafana?
   - How to access metrics from my clusters?
@@ -51,6 +51,8 @@ There is one identity provider configured for Giant Swarm staff and one for you
 
 After selecting the right identity provider, you may run through an authentication workflow. However, if you are already authenticated within the current browser, this will be skipped and you should see the Home dashboard as a result.
 
+When you log in, you will be logged into the Shared Org. which contains a curated set of provided dashboards that we manage and that is accessible to everyone. If you want to learn more about organizations and multi-tenancy, we can only advise you to read the related [documentation]{{< relref "/tutorials/observability/multi-tenancy" >}}).
+
 ## Limitations
 
 Grafana access is currently not available in shared installations, where several customer's observability data would be available from the same Grafana instance.

src/content/tutorials/observability/multi-tenancy/_index.md

@@ -0,0 +1,15 @@
+---
+title: Multi-tenancy
+description: Guides explaining how to configure multi-tenancy in the Observability Platform.
+weight: 20
+menu:
+  principal:
+    parent: tutorials-observability
+    identifier: tutorials-observability-multitenancy
+last_review_date: 2024-12-12
+owner:
+  - https://github.com/orgs/giantswarm/teams/team-atlas
+user_questions:
+  - How to isolate data into the observability platform?
+  - How to create grafana organizations?
+---

src/content/tutorials/observability/multi-tenancy/creating-grafana-organization/_index.md

@@ -0,0 +1,46 @@
+---
+linkTitle: Creating a Grafana organization
+title: Creating a Grafana organization
+description: Guide explaining how to manage Grafana organizations in the Observability Platform.
+menu:
+  principal:
+    identifier: tutorials-observability-multitenancy-create-grafana-organization
+    parent: tutorials-observability-multitenancy
+weight: 40
+last_review_date: 2024-12-12
+user_questions:
+  - How to create a grafana organization?
+  - How to access multi-tenant observability data?
+owner:
+  - https://github.com/orgs/giantswarm/teams/team-atlas
+---
+
+When you first access [your installations Grafana]({{< relref "/tutorials/observability/data-exploration/accessing-grafana" >}}), you will be accessing an organization named _Shared Org_ which gives you access to a set of curated dashboards. However, if you want to be able to provide multi-tenancy of your observability data (data isolation between tenants), the Observability Platform allows you to create your own organizations in self-service.
+
+## Creating your own organization
+
+To create your own grafana organization, you can create a [`GrafanaOrganization`](https://raw.githubusercontent.com/giantswarm/observability-operator/refs/heads/main/config/crd/observability.giantswarm.io_grafanaorganizations.yaml) custom resource in the management cluster containing the Grafana organization specification. 
+
+For example:
+
+```yaml
+apiVersion: observability.giantswarm.io/v1alpha1
+kind: GrafanaOrganization
+metadata:
+  name: giantswarm
+spec:
+  displayName: Giant Swarm
+  rbac:
+    admins:
+    - giantswarm-admins
+    editors:
+    - giantswarm-editors
+    viewers:
+    - giantswarm-viewers
+  tenants:
+  - giantswarm
+```
+
+This Grafana organization will be created by our operators with the name *Giant Swarm*.
+It will be equipped with a basic set of datasources for Loki, Mimir and Alertmanager giving you access to the *giantswarm* tenant.
+The RBAC section defines how to map your sso groups to grafana admin roles (Admin, Editor, Viewer). Note that only admins is mandatory in this section.