Manage tenant custom panels

Purpose

Publish only reviewed component keys to an eligible organisation with contract, owner, revision and audit evidence.

Obedience Cloud is the shared identity and tenant-control surface. It does not turn a platform role into a customer workspace role or a corporate owner, and it never exposes readable passwords or authentication-factor secrets.

Checks before action

• Firm or Enterprise plan is provider-authoritative.
• Contract reference and business owner are named.
• The compiled template and safe configuration pass validation.

Safe process

1. Use the canonical hostStart on cloud.obedience.global or the approved obedience.cloud entry and confirm the secure browser origin before entering account information.
2. Verify scope and authorityFor manage tenant custom panels, confirm the account, organisation, role and customer case or contract reference before continuing.
3. Complete the bounded actionUse the narrow control provided. Elevated operations require personal 2FA, exact-origin requests, unique request identifiers and durable audit availability.
4. Review the resultConfirm provider-authoritative state, record the outcome and route any inconsistency to support without repeating a high-impact request blindly.

Expected records

• Versioned panel manifest.
• Publication event and request replay record.
• Quantify rendering under the same tenant.

Security boundary

• Administrators can lock an account, revoke sessions or start a bounded support flow; they cannot read or choose the user’s password.
• A support actor session is time-limited, labelled, auditable and blocked from non-read HTTP methods.
• Tenant metadata is validated server-side and cannot contain executable JavaScript, secret credentials or hidden role elevation.