Operator console
TenantVault admin dashboard
Sign in at /login first. Bootstrap the first admin via scripts/bootstrap-vault-admin.sh on the host.
Tenants
Cross-tenant directory: list, freeze, deactivate, configure billing plan, force key rotation.
AdminTenantController
Keys
Master key rotations, per-tenant DEK lifecycle, JWT signing key rotations.
AdminKeyController
Security
Privilege-escalation audit timeline, internal STS assume-role review, admin grant management.
AdminSecurityController