One admin centre for every tenant, licence and partner.
Prismara Admin is where organisations are set up and run on Prismara. SovSec, partner MSPs and customers manage tenants, subscriptions, licences, billing, service health and usage in one console, while Prismara Identity stays the source of truth for users. Every app checks a signed licence itself, and customers stay in control of which partners can act for them and for how long.
See it working
Shown with sample data.
What Prismara Admin does
Tenants and subscriptions
Create and manage tenants, subscriptions and licences per user or per tenant, and switch individual apps on or off per tenant.
Group-based licensing
Assign licences to groups so people get the right apps as they join, move and leave, with a 400-day licence-change history you can export.
Customer-controlled partner access
Customers invite a provider or MSP with chosen roles and a duration of up to 730 days; the partner accepts with a passkey, and either side can end it.
Custom roles
Build roles from an allow-list of permissions. Roles with privileged permissions need a second administrator's approval.
Billing and statements
Prorated monthly statements, partner billing and signed statements to Prismara ERP, with CSV import and export.
Health, usage and messages
Service health and active users from every Prismara app, and a message centre that tracks what you haven't read.
App launcher
One launcher, shared by every Prismara app, showing only the apps a person is licensed for.
How it's secured
Prismara Admin follows the engineering rules shared across the suite, plus these product-specific measures.
Signed licences and provisioning
Each app verifies a signed entitlement before letting a user in, and tenant and licence changes arrive as events signed with hybrid Ed25519 and ML-DSA-65.
Two-person rule
Sensitive changes, including passkey resets for administrators, need a second global administrator, bound to the exact action with a passkey.
Post-quantum only
TLS 1.3 with X25519MLKEM768 in and out, and hybrid sign-in tokens from Prismara Identity.
Scoped by database
PostgreSQL row-level security separates tenant, partner and provider views.
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.