Admin

Summary. The platform administrator. Runs day-to-day administration across all tenants — users, master data, the order and inventory workflows, subscriptions, and finance — but with an explicit (not all-encompassing) permission set, so it sits just below super_admin.

What you can do

Users & roles

Manage users at /admin/users (view users, create users, update users, manage users) including suspend/activate.
Manage roles at /admin/roles and the matrix at /admin/roles/matrix (view roles, manage roles).

Master data (full CRUD)

Countries, locations, languages, translations, plan types, sizes, colors, shapes, order states, and product categories under /admin/... — each gated by its manage … permission (e.g. manage countries, manage locations).

Catalog & companies

Products at /admin/products (manage products).
Delivery companies, drivers, vehicles, storage companies, warehouses under /admin/... (manage delivery-companies, manage drivers, manage vehicles, manage storage-companies, manage warehouses).

Inventory

Inventory requests at /admin/inventory-requests — approve/reject/assign (approve inventory-requests, reject inventory-requests, assign inventory-to-storage).
Inventory balances /admin/inventory-balances and transactions /admin/inventory-transactions (view inventory-balances, view inventory-transactions).

Orders

All orders at /admin/orders — approve, reject, assign to delivery, cancel (view orders, manage orders, approve orders, reject orders, assign orders-to-delivery, export orders).

Commerce & support records

Registration requests /admin (manage registration-requests), return requests /admin/return-requests (approve/reject return-requests), disputes /admin/disputes (manage disputes), coupons /admin/coupons (manage coupons), and reviews /admin/reviews (manage reviews).

Subscriptions & finance

Subscription plans, subscriptions, and subscription payments under /admin/... (manage subscription-plans, manage subscriptions, manage subscription-payments).
Wallets and wallet transactions (view wallet, view wallet-transactions).
Withdrawal requests at /admin/withdrawal-requests — and release funds: this role uniquely holds both manage withdrawal-requests (triage) and approve withdrawal-requests (payout), per #979.

Platform

Logs (view activity-logs, view audit-logs, view request-logs, view logs), settings & payment gateways (manage settings, manage payment-gateways, manage landing-page), documentation CRUD (manage documentation, view internal docs), and the API reference (view api docs).

What you cannot do

Not synced to every permission — capabilities not in the seeded list (e.g. parts of settlements/ledger reserved for higher-trust finance grants) are denied.
Cannot grant the super_admin role to bypass these limits.

Data scope

Platform-wide and cross-tenant. Lists are not narrowed to a single company or owner — e.g. /admin/orders shows every merchant's orders across all tenants.

Permissions

Granted in SaasRoleSeeder ($admin->givePermissionTo(...)). Highlights: manage users, manage roles, all master-data manage …, manage products, manage delivery-companies, manage storage-companies, manage warehouses, approve inventory-requests, assign inventory-to-storage, manage orders, assign orders-to-delivery, manage subscriptions, manage subscription-payments, manage withdrawal-requests, approve withdrawal-requests, manage coupons, manage disputes, manage reviews, manage tenants, view logs, manage settings, manage documentation, view api docs.

How this role is assigned

Assigned by a super admin (or another admin) via /admin/users. Not available through self-registration.

See roles/overview, roles/super-admin, and roles/staff.