Restricted operator surface

Platform administration, isolated.

This console is separate from every product console and requires the xaere_platform_admin role plus MFA.