HOTELA Superadmin

Access Matrix

Every active grant: which user has which role on which domain. As superadmin, you grant domain_admin; domain admins grant other roles within their own domain.

Audit Log

Every grant, revoke, handoff issue, and handoff redeem — append-only. Last 200 events.

Managed Domains

Every vhost with SSO turned on. Add a new domain by inserting a row in managed_domains + domain_roles via SQL or future migration.

Per-Domain Roles

The role taxonomy each domain accepts. Today uniform across all domains: domain_admin, member, guest.