SuperAdmin Overview
SuperAdmins have full platform access across all tenants in a SecureLink deployment. This role is designed for platform operators who need to manage the entire SD-WAN infrastructure, including tenants, users, devices, and system-wide settings.
What SuperAdmins Can Do
As a SuperAdmin, you have access to the following capabilities:
- Manage all tenants and their resources -- Create, configure, and monitor every tenant in the platform.
- Create and manage admin users -- Provision both SuperAdmin and TenantAdmin accounts via email invitations.
- Manage VPN users across all tenants -- View, create, and disable VPN client users for any tenant.
- Configure system-wide settings -- SMTP configuration, security policies, default values, and platform behavior.
- Integrate with Global VSA -- Connect to the Global Virtual Security Appliance for multi-orchestrator management, feature control, and billing metrics.
- Approve or reject pending devices -- Review and approve edges, MTGEs (shared gateways), and connectors awaiting activation.
- View cross-tenant metrics and dashboards -- Access aggregated observability data spanning all tenants, including traffic analytics, device health, and VPN usage.
Admin Role Comparison
The table below summarizes the key differences between the three admin roles. ChannelAdmin is a middle tier scoped to a channel (a partner or reseller that owns a group of tenants) -- see ChannelAdmin Access for details.
| Capability | SuperAdmin | ChannelAdmin | TenantAdmin |
|---|---|---|---|
| View all tenants | Yes | Channel's tenants only | Own tenant only |
| Create users | All types | Within channel (no SuperAdmin/ChannelAdmin) | VPN users only |
| Manage channels | Full CRUD | Read-only | No access |
| System settings | Full access | Per selected tenant | No access |
| Global VSA | Full access | Channel's tenants | No access |
| Edge management | All tenants | Channel's tenants | Own tenant only |
| Approve devices | All | Channel's tenants | Own tenant only |
| Peering configuration | All tenants | Channel's tenants | Own tenant only |
| Connector management | All tenants | Channel's tenants | Own tenant only |
| Shared Gateway (MTGE) management | All tenants | Channel's tenants | Own tenant only |
| View metrics and dashboards | Cross-tenant | Channel's tenants | Own tenant only |
Navigation
SuperAdmin-specific features are found in the following areas of the SecureLink management UI:
- Settings > System -- Platform-wide configuration including SMTP, security, and defaults.
- Settings > Users -- Admin user management, VPN user management, and pending invitations.
- Global VSA -- Multi-orchestrator overview, feature flags, tenant metrics, and billing export.
- Equipment -- Edges, Shared Gateways, and Connectors across all tenants (with tenant filtering).
Use the tenant filter dropdown in the top navigation bar to scope your view to a specific tenant, or select "All Tenants" for a platform-wide view.