Assuming that a service device you are integrating into the Cisco ACI is dedicated to one tenant, where should you configure the logical device and associated concrete devices?

In Cisco ACI, service devices dedicated to a particular tenant should have their logical and concrete device configurations defined within that tenant's scope. This tenant-specific configuration ensures proper policy application, resource isolation, and streamlined management tailored to the consuming tenant's applications.

The device's base hypervisor UI is used for managing the virtual machine or container hosting the service, not for configuring its logical integration or policy within the ACI fabric.

The management tenant is reserved for fabric-wide configurations, APIC management, and out-of-band access, not for tenant-specific service device deployments.

While a service device requires some initial setup on its own interface, its integration into the ACI fabric and the definition of its logical and concrete devices are managed via the APIC, not directly on the service device itself.