Working inside a tenant

Superadmin

A superadmin cannot administer a tenant from the superadmin navigation. To change anything inside a tenant you enter it, and the interface becomes that tenant’s.

Entering a tenant

Inspect Tenant on a tenant’s detail page swaps the superadmin navigation for that tenant’s ordinary one - Overview, Jobs, Files and the full ADMIN section. You are now acting as a tenant administrator of that tenant.

Leave tenant in the navigation returns you to the superadmin view.

You are making real changes in someone's tenant

Inside a tenant you have a tenant admin’s full powers: creating users, changing token balances, deleting nodes. Nothing marks these as having been done by a superadmin from the tenant’s own point of view.

Impersonating a user

Impersonate User goes a step further: the application behaves as that specific user, with their group’s limits and permissions.

This is the tool for reproducing “it does not work for me” reports, because most of those come down to a permission or a group membership that is not obvious from the admin side.

1. Open the tenant, then Impersonate User and pick the account.
2. Reproduce what they described.
3. Leave impersonation when done.

Impersonation is the strongest thing on the platform. Treat it as a diagnostic, not as a way to do someone’s work for them - and prefer looking over acting while you are wearing someone else’s account.

Choosing between them

You want to	Use
See what a tenant has	The tenant’s detail tabs. No entering needed
Change a tenant’s configuration	Inspect Tenant
Understand why one person cannot do something	Impersonate User