Super-admin
Full cross-organization visibility and control with a clear top-level boundary.
Use case
Tiered admins without a role per exception
Many admin models become messy when every exception turns into a new role. A better approach is to define a small set of admin roles and scope their permissions by organization, team, and responsibility.
Admin roles by tier
Org-admin
Controls an organization or business unit without creating a role per exception.
Team-lead
Manages their team and approved workflows without inheriting every permission across the org.
Why this works
A super-admin can inherit broad control, while an org-admin gets the organization-scoped permissions they need. A team-lead only sees the team context and responsibilities that matter for day-to-day decisions. Instead of making a new role for every exception, you model the least privilege boundary and let hierarchy and conditions do the work.