Skip to main content

Platform Super Administrator (PSA)

Who this is: The top administrator of the platform. Works across every tenant.

Can see

  • Everything, in every tenant, including the security centre, role policies, configuration, audit trail and marketplace requests.

Can do

  • Create tenants.
  • Save role policies in Roles & permissions.
  • Change the MFA policy in the security centre.
  • Review marketplace requests: accept, decline (with a written reason) or pass them on.
  • Manage the product catalogue.
  • Reply to contact inquiries.
  • Activate or suspend registry entries.
  • Set the withholding tax rate for a scheme.
  • Do everything a CSA can do.

Can never do

  • Be limited to one state, one institution or one programme. The PSA cannot be scoped.
  • Be created through the normal staff invitation. (To confirm: how the first PSA is created.)

Should not do (guidance, even though the system allows it)

  • Approve a finance transaction that the PSA made. The system lets the PSA do this in the finance portal. Use a different checker.

Top 5 tasks

  1. Review and accept or decline marketplace requests.
  2. Save role policies that narrow a role's access.
  3. Change the MFA policy for all staff.
  4. Save escalation service levels and early-warning thresholds.
  5. Set the withholding tax rate and basis for a scheme.