Subtenant Admins

Subtenant Admins manages administrator accounts that are scoped to a specific subtenant. They can log in to the main Kiwire admin panel but can only manage data — users, reports, logs — within their assigned subtenant.

'alt' => 'Dashboard overview', 'caption' => 'The default Kiwire dashboard layout', 'screenshot' => true, 'class' => '', ]) Drop images into: public/assets/img/docs/{page}/{filename} --}}

Image not uploaded yet public/assets/img/docs/subtenant-admins/overview.png

How Subtenant Admins Differ from Tenant Admins

A regular tenant admin has access to all data within the tenant and can manage global configuration (settings, connectors, portal templates). A subtenant admin is restricted:

• They can only see WiFi users, portal logs, sessions, and reports belonging to their assigned subtenant.
• They cannot access system configuration, connectors, portal template editors, or other subtenants.
• Their role is selected from subtenant roles (defined in Subtenant Roles) — a separate, narrower set of roles from the main tenant roles.

Fields

Field	Description
name	Display name of the subtenant admin.
email	Login email address. Used for invitation emails and password resets.
subtenant	Which subtenant this admin is assigned to. One admin belongs to exactly one subtenant.
role	The subtenant role assigned to this admin (e.g., Subtenant Admin, Subtenant Manager, Subtenant Viewer).
is_active	Active/inactive toggle. Inactive subtenant admins are blocked from login immediately.
last_login_at	Timestamp of the most recent successful login.

Actions

Create Subtenant Admin

Select the target subtenant, fill in the name, email, and role, then save. An invitation email is automatically sent with a link to set the admin's password. The link is valid for 24 hours.

Edit

Update the admin's name, email, subtenant assignment, or role. Changing the subtenant assignment immediately moves the admin's scope to the new subtenant.

Deactivate

Blocks login immediately. The active flag is enforced on every request, so active sessions are terminated within seconds.

Reset Password

Sends a password reset email to the admin. Valid for 60 minutes.

Login Experience

Subtenant admins log in at the same URL (/admin/login) as regular tenant admins. After login, they see the admin panel with a filtered navigation — only modules they have permission to access and data scoped to their subtenant are visible. The header shows a subtenant badge indicating which sub-organisation they are managing.

Required Permissions

view-subtenant-admins · create-subtenant-admins · update-subtenant-admins · delete-subtenant-admins