24 · Master Admin (platform ops)

SaaS operator console — provision tenants, manage plans/features, platform barcode catalog, platform analytics. Not a tenant’s business POS.

Role: master_admin only /master-admin/*

Who this is for

	Master Admin	Tenant Business Hub
Audience	You / GPE operators	Business owner/manager
Data	Tenant metadata, health, catalog	That tenant’s sales/ops
Auth	`requireRoles('master_admin')`	Tenant session roles

Audit Tenant update/archive/delete write best-effort audit events into the target tenant analytics DB (S11-6 fix).

UI routes

Path	Purpose
`/master-admin`	Dashboard / portal hub
`/master-admin/tenants` · `…/:id`	List / detail / edit
`/master-admin/provision`	Create tenant + DBs
`/master-admin/billing`	Platform billing views
`/master-admin/platform-catalog`	Global barcode/UPC catalog admin
Analytics / feature management pages	Platform-level (files under master-admin/)

API

Mount	Examples
`/api/master-admin`	GET tenants, system-health, platform-analytics; POST tenants; PUT/PATCH archive; DELETE
`/api/master-admin/tenants`	provision, status, stats, test-provision, reset-password
Platform catalog	CRUD + upload-image under master-admin platform-catalog router

Tenant provisioning

flowchart TD
  A[Master admin provision] --> B[Create tenant row master DB]
  B --> C[Create dev-slug main]
  C --> D[dev-analytics-slug]
  D --> E[dev-hr-slug]
  E --> F[Copy schema from templates]
  F --> G[Owner user + staff]
  G --> H[tenant_employees routing]

Service: comprehensiveTenantProvisioning.js (also older tenantProvisioning.js). Template DBs seed consistent schemas.

Platform product catalog

Global GTIN enrichment shared by all tenants — DocHub 09. Master owns CRUD + images; tenants only lookup.

File anchors

Concern	Path
Master admin API	`masterAdmin.routes.js`
Provisioning	`master-admin.tenant-provisioning.routes.js` · comprehensiveTenantProvisioning
Catalog admin	`masterAdmin.platformCatalog.routes.js` · PlatformCatalogAdmin.jsx
UI	`frontend/src/pages/master-admin/*`
OAO	24-master-admin.html · Appendix C provisioning