Grant or revoke Platform Administrator and Super Administrator access. Every change writes to the audited user_roles table — no shared passwords, no shared keys.
Resolved server-side from your staff session token — never trusted from local storage alone.
Look up a registered user by email — no need to know their internal user ID.
Every staff member with at least one role, most recent grant first.
Search any customer account. Suspending blocks login immediately and revokes any active session — see auth/rbac.js's admin:users:manage.
View any organization's plan, owner, and members. Read-only — suspending an organization isn't available yet (no status column on organizations).