Admin details
Role
Super Admin
Full tenant access — can invite, promote, demote, and revoke admins. Cannot be removed if they are the last super-admin.
Admin
Can manage orders, customers, catalog, and settings. Cannot manage the admin roster.
ⓘRole changes take effect at the admin's next JWT refresh (up to 15 min).
Danger zone
Revoking access immediately prevents this admin from logging in. Their JWT is invalidated at the next refresh (up to 15 min). Recorded in the audit log.