A separate, audited operator identity. Tenant metadata is visible here; tenant data only via OTP-consented support sessions.
Platform administrators only.
Separate identity · 8h session · every action audited.