Systems, methods, and apparatuses for pre-configured per-tenant isolation in a multi-tenant cloud based computing environment

A method performed by a system of a host organization, the system having a processor and a memory therein, wherein the method comprises:

• creating an isolation group, wherein creating the isolation group includes:
• defining isolation requirements, identifying a group of features utilizing call-out functions, and selecting from among the group of features utilizing call-out functions a group of features having the defined isolation requirements;
• deploying platform software integrating the isolation requirements, wherein the platform software contains instructions to map the isolation requirements to a customer organization;
• creating the customer organization;
• creating a unique variant of the customer organization, wherein creating the unique variant of the customer organization includes declaratively applying an isolation layer specifying isolation requirements on top of a base layer for the customer organization;
• and
• deploying the unique variant of the customer organization onto the customer organization's cloud computing infrastructure, wherein the unique variant validates per-tenant distinctions for various applications subjected to the isolation requirements.

Non-transitory computer-readable storage media having instructions stored thereupon that, when executed by a processor of a system having at least a processor and a memory therein, the instructions cause the system to perform operations comprising:

• creating an isolation group, wherein creating the isolation group includes:
• defining isolation requirements, identifying a group of features utilizing call-out functions, and selecting from among the group of features utilizing call-out functions a group of features having the defined isolation requirements;
• deploying platform software integrating the isolation requirements, wherein the platform software contains instructions to map the isolation requirements to a customer organization;
• creating the customer organization;
• creating a unique variant of the customer organization, wherein creating the unique variant of the customer organization includes declaratively applying an isolation layer specifying isolation requirements on top of a base layer for the customer organization;
• and
• deploying the unique variant of the customer organization onto the customer organization's cloud computing infrastructure, wherein the unique variant validates per-tenant distinctions for various applications subjected to the isolation requirements.