One admin centre for every tenant, licence and app.
Prismara Admin is where organisations are set up and run on Prismara. SovSec, partner MSPs and customers manage tenants, subscriptions, licences, service health and usage in one console, while Prismara Identity stays the source of truth for users. It also provides the app launcher shown in every Prismara app.
What Prismara Admin does
Tenants and subscriptions
Create and manage tenants, subscriptions and licences per user or per tenant.
Partners and delegated admin
SovSec, MSPs and customers in one hierarchy. Delegated access is capped, time-limited to 730 days and approved by the customer's global administrator.
Signed licences
Each app checks a signed entitlement itself before letting a user in.
Service health and usage
Health and active users reported by every Prismara app in a standard format.
App launcher
One launcher, shared by every Prismara app, showing only the apps a person is licensed for.
Two-person rule
Sensitive changes need a second administrator's approval, bound to the exact action with a passkey.
How it's secured
Prismara Admin follows the engineering rules shared across the suite, plus these product-specific measures.
Signed provisioning
Tenant and licence changes reach the apps as events signed with hybrid Ed25519 and ML-DSA-65.
Post-quantum only
TLS 1.3 with X25519MLKEM768 in and out, and hybrid sign-in tokens from Prismara Identity.
Scoped by database
PostgreSQL row-level security separates tenant, partner and provider views.
Independently reviewed
All high and medium findings from the v0.1 review are fixed with tests.
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.