Skip to main content

Real-World Example

A new operations manager needs Super Admin access. An authorized Super Admin creates the account, and the new user can log in only to Super Admin workflows.

Visual Flow

How It Should Work

  • It should allow authorized management of Super Admin users.
  • It should keep Super Admin users separate from creditor and EcoMail Hub users.
  • It should remove or disable access when a Super Admin user should no longer log in.

How It Should Not Work

  • It should not allow unauthorized users to create Super Admin accounts.
  • It should not accidentally create a creditor or EcoMail Hub user instead.
  • It should not leave removed users with platform-level access.

Developer Notes

  • This is high-risk access management.
  • Auditability and guard separation matter more here than convenience.
  • app/Livewire/Creditor/ManageH2HUsers
  • routes/superadmin.php
  • routes/superadmin/auth.php
Last modified on May 26, 2026