Platform RBAC
Platform Roles
Not all super admins can do everything. Permissions are role-based and audited.
Role list
Select a role to inspect its permissions.
Platform Owner
Full platform ownership across tenants, billing, users, packages, feature flags, and audit.
View tenants
Create tenants
Edit tenants
Suspend tenants
Manage tenant billing
Manage tenant modules
Manage platform users
Manage platform roles
Manage feature flags
Manage global integrations
View platform audit
Export platform data
Impersonate tenant
View tenant financials
Manage packages
Dangerous permissions are highlighted: Suspend tenant, Export data, Impersonate tenant, Manage platform users, Change feature flags.
| Permission | Platform Owner | Platform Admin | Platform Support | Platform Finance | Platform Auditor | Platform Implementation Manager |
|---|---|---|---|---|---|---|
| Tenant management | ||||||
View tenants | ||||||
Create tenants | ||||||
Edit tenants | ||||||
Suspend tenants | ||||||
Manage tenant billing | ||||||
Manage tenant modules | ||||||
| Platform administration | ||||||
Manage platform users | ||||||
Manage platform roles | ||||||
Manage feature flags | ||||||
Manage global integrations | ||||||
Manage packages | ||||||
| Audit and access | ||||||
View platform audit | ||||||
Export platform data | ||||||
Impersonate tenant | ||||||
View tenant financials | ||||||