Admin roles & capabilities
Super_admin vs ops_admin — what each internal role can and cannot do.
Last updated 2026-07-01
Two admin roles
The platform has two internal admin roles, separate from customer container roles:
| Role | Scope of control |
|---|---|
| super_admin | Everything: user & financial management, refunds/approvals, destructive actions, security overrides, and system configuration (including the runtime Pricing editor). |
| ops_admin | Broad operational control — users, tokens, analyses, tools, content, support — but NOT financial approvals (refunds), destructive deletes, or security overrides. |
Runtime pricing control
Super admins can edit plan prices, token allowances, org limits, expansion costs, token packs, and per-tool costs at runtime from Pricing & Plans — changes apply platform-wide without a redeploy.
Audited
Sensitive admin actions are recorded in the audit ledger under Trust & Safety.