Platform roles (TenancyEngine)

Named permission bundles for TenancyEngine console staff (platform_admin, platform_impersonator, etc.). Roles attach claims that the identity system evaluates at sign-in.

Console: Platform settings → Roles (/platform/roles)

Edit with the contract environment selector. Promote staged changes to Production after review.

Related

• Platform claims — JWT claims assigned to roles
• Platform staff — assign roles to operator accounts