Tenant-scoped
Company root
Every operational record starts with company ownership.
Security and Tenancy Console
Access foundation
Tenant resolution, role permissions, security events, API tokens, and mobile device trust are prepared before business modules unlock.
Phase 1 guarded
Ready
Branches
Branch-level access, timezone, country, and field-team scope.
Bound
Domains
Subdomain and custom-domain strategy for SaaS and self-hosted.
Registry
Mobile devices
Trusted device enrollment for field and offline operations.
Root Permission Catalog
installer.manage
license.manage
updates.manage
security.view
security.manage
tenants.manage
users.manage
roles.manage
api_tokens.manage