Platform Admin

Tenant data is only reachable through audited, two-person break-glass.