Boundaries¶
Overview¶
Although Super Administrators possess extensive platform access, their responsibilities are intentionally limited to platform governance.
The role is not intended to replace Tenant Administrators, Providers, or Patients.
Platform Boundary¶
flowchart TB
SUPER["Super Administrator"]
PLATFORM["Platform Governance"]
TENANTS["Tenant Operations"]
SUPER --> PLATFORM
SUPER -. Delegated .-> TENANTSSuper Administrators govern the platform.
Tenant Administrators govern healthcare organizations.
What Super Administrators Can Access¶
flowchart TB
SUPER["Super Administrator"]
TENANTS["All Tenants"]
ADMINS["Tenant Administrators"]
AUDIT["Audit Logs"]
REPORTS["Platform Reports"]
SUPER --> TENANTS
SUPER --> ADMINS
SUPER --> AUDIT
SUPER --> REPORTSWhat Super Administrators Should Not Manage¶
flowchart TB
SUPER["Super Administrator"]
APPOINTMENTS["Appointments"]
SCHEDULES["Schedules"]
CONSULTATIONS["Consultations"]
PATIENT_CARE["Patient Care"]
SUPER -. Avoid Direct Management .-> APPOINTMENTS
SUPER -. Avoid Direct Management .-> SCHEDULES
SUPER -. Avoid Direct Management .-> CONSULTATIONS
SUPER -. Avoid Direct Management .-> PATIENT_CAREOperational healthcare responsibilities belong to tenant-level users.
Tenant Isolation Considerations¶
Although Super Administrators may access all tenants, they must respect organizational boundaries.
flowchart LR
SUPER["Super Administrator"]
TENANT_A["Tenant A"]
TENANT_B["Tenant B"]
TENANT_C["Tenant C"]
SUPER --> TENANT_A
SUPER --> TENANT_B
SUPER --> TENANT_CThis access exists for governance and support purposes.
Separation of Responsibilities¶
flowchart TB
SUPER["Super Administrator"]
TENANT_ADMIN["Tenant Administrator"]
PROVIDER["Provider"]
PATIENT["Patient"]
SUPER -->|"Platform Governance"| SUPER
TENANT_ADMIN -->|"Organization Operations"| TENANT_ADMIN
PROVIDER -->|"Clinical Operations"| PROVIDER
PATIENT -->|"Healthcare Access"| PATIENTEach role has a clearly defined area of responsibility.
Architectural Principles¶
The Super Administrator role follows several principles:
Governance Over Operations¶
Focus on platform management rather than clinical operations.
Least Operational Involvement¶
Avoid participation in tenant workflows whenever possible.
Administrative Oversight¶
Maintain visibility into platform health and tenant status.
Separation of Duties¶
Operational healthcare responsibilities remain delegated to tenant-scoped roles.
These boundaries ensure a clear distinction between platform administration and healthcare operations.