Administration, Security & Operations

4. The Super-Admin Console

Above individual organisations sits a platform-level console for the operator who runs SamvraCore for many tenants. The ManageDashboard is its entry point, and from there a super-admin can govern organisations and their users across the whole platform. This is a distinct scope from the Organization Admin seen inside a single tenant: the super-admin works across every organisation at once, which is why its audit view is explicitly platform-wide rather than limited to one tenant's records.

The console groups several cross-organisation capabilities:

• Manage Organizations (ManageOrganizations, ManageOrganizationDetail) — oversight of every tenant.
• Manage Users (ManageUsers) — user administration across organisations.
• Manage Subscriptions (ManageSubscriptions, ManageSubscriptionDetail) — the commercial relationship with each tenant.
• Manage Audit Logs (ManageAuditLogs) — platform-wide, not just one organisation.
• Manage Settings and Manage Support Staff.

Impersonation with accountability

A notable capability is Manage Impersonation Sessions (ManageImpersonationSessions), which lets an administrator impersonate an organisation's users — but with a full audit trail recorded in impersonation_session.go. This matters because impersonation is a powerful support tool that can also be a security risk; binding it to an audit trail means every impersonation is traceable. The super-admin console thus balances broad operational power with accountability, extending the same audit discipline used within organisations to the platform level where the stakes are highest.