SuperAdmin Overview
SuperAdmins have full platform access across all tenants in a SecureLink deployment. This role is designed for platform operators who need to manage the entire SD-WAN infrastructure, including tenants, users, devices, and system-wide settings.
What SuperAdmins Can Do
As a SuperAdmin, you have access to the following capabilities:
- Manage all tenants and their resources -- Create, configure, and monitor every tenant in the platform.
- Create and manage admin users -- Provision both SuperAdmin and TenantAdmin accounts via email invitations.
- Manage VPN users across all tenants -- View, create, and disable VPN client users for any tenant.
- Configure system-wide settings -- SMTP configuration, security policies, default values, and platform behavior.
- Integrate with Global VSA -- Connect to the Global Virtual Security Appliance for multi-orchestrator management, feature control, and billing metrics.
- Approve or reject pending devices -- Review and approve edges, MTGEs (shared gateways), and connectors awaiting activation.
- View cross-tenant metrics and dashboards -- Access aggregated observability data spanning all tenants, including traffic analytics, device health, and VPN usage.
SuperAdmin vs TenantAdmin
The table below summarizes the key differences between the two admin roles:
| Capability | SuperAdmin | TenantAdmin |
|---|---|---|
| View all tenants | Yes | Own tenant only |
| Create users | All types | VPN users only |
| System settings | Full access | No access |
| Global VSA | Full access | No access |
| Edge management | All tenants | Own tenant only |
| Approve devices | All | Own tenant only |
| Peering configuration | All tenants | Own tenant only |
| Connector management | All tenants | Own tenant only |
| Shared Gateway (MTGE) management | All tenants | Own tenant only |
| View metrics and dashboards | Cross-tenant | Own tenant only |
Navigation
SuperAdmin-specific features are found in the following areas of the SecureLink management UI:
- Settings > System -- Platform-wide configuration including SMTP, security, and defaults.
- Settings > Users -- Admin user management, VPN user management, and pending invitations.
- Global VSA -- Multi-orchestrator overview, feature flags, tenant metrics, and billing export.
- Equipment -- Edges, Shared Gateways, and Connectors across all tenants (with tenant filtering).
tip
Use the tenant filter dropdown in the top navigation bar to scope your view to a specific tenant, or select "All Tenants" for a platform-wide view.