Back to featuresAccess
Multitenant RBAC
Tenant membership, role permissions, platform super-admins, and tenant switching across the dashboard.
Operator notes
- Users always resolve an active tenant before tenant data is returned.
- Dashboard navigation is filtered by the active role's permissions.
- Platform super-admins can inspect tenants without joining each tenant.
Safety checks
- Unknown tenant overrides return 403.
- Malformed tenant IDs return 400.
- The last active platform super-admin cannot be disabled.
Primary routes
/app/settings/members/app/admin/security/app/admin/tenants