Admin

Admin · Identity

Who has the keys.

Identities, authenticators, sessions, and the role catalog that bounds reach. The flagged session and the open break-glass grant are the same incident the ops feed records as EVT-9926.

Identities1212 active
MFA enrolled75%1 pending
Active sessions61 flagged
Service accounts53 active

User roster

Showing 12 of 12 identities

NameRoleStatusMFA
Eliza Carringtoneliza.carrington@northwind.exampleOwneractiveenrolled
Marco Reyesmarco.reyes@northwind.exampleOperatoractivepending
Priya Nadarpriya.nadar@sunspire.exampleOwneractiveenrolled
Dr. Susan Hallsusan.hall@briarcliff.exampleAdminactivenone
Owen Parkowen.park@briarcliff.exampleOperatoractiveenrolled
Diana Frostdiana.frost@beacon.exampleOwneractiveenrolled
James Tellermanj.tell@beacon.exampleOperatoractiveenrolled
Reggie Vargasreggie.vargas@meridian.exampleOwneractiveenrolled
Helena Brookshelena.brooks@meridian.exampleOperatoractivenone
Sasha Kimsasha.kim@naaslabs.examplePlatform Adminactiveenrolled
Avery Linavery.lin@naaslabs.examplePlatform Opsactiveenrolled
Quinn Marshquinn.marsh@naaslabs.exampleAuditoractiveenrolled

Session origins

7 live
  • activesess-4471Eliza Carrington198.51.100.10 · Northwind HQ
  • activesess-4472Marco Reyes198.51.100.24 · Northwind NOC
  • activesess-4473James Tellerman203.0.113.7 · Beacon Digital
  • activesess-4474Sasha Kim203.0.113.40 · NaaS Labs Ops
  • activesess-4475Avery Lin203.0.113.41 · NaaS Labs Ops
  • activesess-4476Reggie Vargas203.0.113.90 · Meridian NOC
  • flaggedsess-4480EVT-9926Marco Reyes198.51.100.242 · unrecognizedLogin from unrecognized geography during active SEV2 incident (INC-1).

Role assignments

13 grants
UserRoleScopeByActions
Eliza CarringtonOwnerNorthwind Logisticsu-naas-admin
Marco ReyesOperatorNorthwind Logisticsu-nw-owner
Priya NadarOwnerSunspire Resortsu-naas-admin
Dr. Susan HallAdminBriarcliff Healthu-bn-owner
Owen ParkOperatorBriarcliff Healthu-bc-admin
Diana FrostOwnerBeacon Digitalu-naas-admin
James TellermanOperatorBeacon Digitalu-bn-owner
James TellermanOperatorNorthwind Logisticsu-naas-ops
Reggie VargasOwnerMeridian Capacity Co.u-naas-admin
Helena BrooksOperatorMeridian Capacity Co.u-mer-owner
Sasha KimPlatform Adminplatformu-naas-admin
Avery LinPlatform Opsplatformu-naas-admin
Quinn MarshAuditorplatformu-naas-admin

Role catalog

RBAC

Platform

  • Platform AdminplatformOperate the federation across all tenants.4 permissions
  • Platform OpsplatformRun changes and approve break-glass requests.3 permissions

Tenant admin

  • OwneraccountFull account control, billing, and user management.6 permissions
  • AdminaccountManage services and users, no billing changes.3 permissions

Operations

  • OperatoraccountOperate services day to day.2 permissions

Finance

  • BillingaccountView and pay invoices; no service changes.3 permissions

Read only

  • VieweraccountRead-only access to the account.1 permissions
  • AuditorplatformRead-only across all tenants for audit.2 permissions

Break-glass ledger

1 active · 2 total
GranteeApproverOn behalf ofSeverityWindowState
James Tellermanconn-5 down (DEN<->KC fiber cut, INC-1). Custodial assist: reroute and comms under Beacon engagement.EVT-9926Avery LinNorthwind Logisticssev22026-07-28 12:50 UTCexp 2026-07-28 16:50 UTCactive
James TellermanLOA processing delay on cross-connect; temporary access to upload docs.Sasha KimBriarcliff Healthsev32026-07-24 09:10 UTCexp 2026-07-24 11:10 UTCclosed

simBreak-glass is governed by approval workflow. Live grants appear on the governance incident ledger.

On-behalf-of action ledger

Grant role

Assign a role to an identity.sim

Simulated only. No grant is persisted; a badge-marked row appears in the table for this session.

Revoke assignment

Revoke role fromuser. The identity loses that role's reach immediately in a live system.

Simulated writeNo assignment is removed. This is a preview.

Create role

simRole definitions are simulated: nothing is created or changed.

One permission string per line, for example connection:read.