Emergency Access

super_admin break-glass procedure, role hierarchy, and emergency access protocol.

Critical Security Procedure

Break-Glass Access — Use Only in Emergencies

super_admin bypasses all role-based access controls. Every action is audit-logged with actor identity, timestamp, and change diff. Unauthorized use is a policy violation.

Break-Glass Procedure

1

Identify the Incident

Confirm the situation requires super_admin override (system outage, data lockout, security breach).

2

Authorize Break-Glass

Obtain verbal/written authorization from a second admin or the operations lead before escalating.

3

Access via super_admin

super_admin bypasses all RBAC route gates and permission checks via the canonical authChecks layer.

4

Perform the Minimum Action

Execute only the action required to resolve the incident. Avoid bulk deletions or irreversible changes.

5

Document the Override

Record the reason, scope, and timestamp. The action is automatically logged to the AuditEvent ledger.

6

Post-Incident Review

Notify the auditor role and security team within 24 hours for compliance review.

Role Hierarchy & Risk Levels

Guest

Public website access only

NONE

Customer

Customer dashboard and personal records

LOW

Dealer

Dealer portal and customer requests

LOW

Technician

Service bookings and technical work

LOW

Service Advisor

Service management and assignments

MEDIUM

Warehouse Operator

Inventory read and limited adjustments

MEDIUM

Inventory Manager

Full inventory control and imports

HIGH

Procurement Officer

Supplier, purchase order, and procurement workflow control

HIGH

Finance Manager

Invoices, payments, settlements, reconciliation, and credit control

HIGH

Auditor

Read-only audit, report, and compliance visibility

HIGH

Admin

Operational access and user management

HIGH

Super Admin

Full system access and RBAC control

CRITICAL

Emergency Contacts

System Administrator

super_admin@3bmotors.com

Security Officer

security@3bmotors.com

Audit & Compliance

audit@3bmotors.com

Operations Hotline

+251 94 340 1111

super_admin Activity Trail

Last 20 privileged actions
EventActor
No super_admin actions recorded.