Tenant administrators
Grant or revoke tenant-administrator privileges for users in your organisation — and see a full audit trail of every change.
Tenant administrators
The Administrators tab (Tenant Settings → Administrators) lets you control who has tenant-level administrative privileges. Tenant administrators can access Tenant Settings, manage all companies, and impersonate any user in the tenant.
Only existing tenant administrators can grant or revoke this privilege — you cannot elevate your own account to tenant-admin from within the app.
Administrators table
The table lists every user in the tenant with a toggle in the Admin column:
| Toggle state | Meaning |
|---|---|
| On (green) | User is a tenant administrator |
| Off (grey) | User is a regular user with no tenant-level access |
The toggle for your own account is disabled — you cannot revoke your own administrator privileges.
Granting administrator access
Flip the toggle for any non-admin user to on. The change takes effect immediately — a confirmation toast appears and the activity log records the action. The user gains access to Tenant Settings on their next page load.
Revoking administrator access
Flip the toggle for any admin user (except yourself) to off. The revocation is immediate — the user loses access to Tenant Settings and can no longer manage other companies or impersonate users.
Activity log
An Activity log (collapsed by default) appears below the table. Expand it to see a chronological timeline of every grant and revocation, including who made the change and when. Click Show more to load older entries.
Best practice
Keep the number of tenant administrators small. Tenant administrators can read and modify all data across all companies in the tenant, including sensitive financial documents. Consider:
- At least 2 administrators (so there is always a backup if one person is unavailable)
- No more than 3–5 for most organisations
- Revoke access promptly when someone leaves the organisation