Admin guide
Team
Invite teammates and manage roles.
Bring colleagues into the admin workspace from /admin/team.
Invite flow
- Enter their email and pick a role.
- NShop saves a pending invite server-side.
- The next time that email signs in to NShop (existing or new account), the platform applies the role automatically and the invite is consumed.
Invites are stored under /admin_invites/{email} — never exposed to
shoppers and never client-writable.
Roles
- Tenant admin — full access inside one tenant. Cannot read other tenants' data.
- Superadmin — global, read-only across tenants. Used for support and operations.
Customers (signed-in shoppers) have no admin access; they only see their own orders, addresses, wishlist, and reviews.
Removing a teammate
Click Revoke next to their entry. The custom claim is cleared and an audit log entry is written. They lose access immediately on next request.
Audit trail
Every team change (add, role change, remove) is logged to a server-only
/admin_audit collection. Superadmins can query it for compliance.