Super Admin Portal & Multi-Tenant Architecture
Super Admin Portal & Multi-Tenant Architecture
The YeneSchool Super Admin Portal (SUPER_ADMIN role) is the central command center for platform operators, multi-academy networks, and enterprise hosting administrators. It provides complete oversight across all subscribing school tenants, managing infrastructure capacity, subscription tiers, manual bank payment verifications, and global system configurations.
1. Core Super Admin Capabilities
| Module | Functional Scope | Key Administrative Tasks |
|---|---|---|
| School Directory | Multi-tenant tenant database | Onboard institutions, configure subdomains, toggle status (ACTIVE, PAST_DUE, SUSPENDED). |
| Subscription Engine | SaaS licensing & billing | Define tier packages (FREE, STANDARD, PRO, ENTERPRISE), review bank transfer slips. |
| Quota Enforcement | Resource & boundary controls | Enforce limits on active students, staff accounts, multi-campus branches, and storage quotas. |
| System Operations | Infrastructure observability | Monitor Redis BullMQ async worker queues, active WebSocket connections, and database performance. |
| Release Management | Platform updates | Broadcast system-wide announcements, schedule maintenance windows, and manage feature flags. |
2. Platform Multi-Tenancy Design
YeneSchool operates on a logically isolated multi-tenant architecture:
- Shared Application Cluster: High-performance NestJS backend instances and Next.js frontend services serve all schools with dynamic sub-domain routing (
school-slug.yeneschool.meor custom school domains). - Tenant Scoping at Database Level: Every institutional record (students, grades, financial transactions, staff, and timetable slots) is strictly tagged with a mandatory
schoolIdforeign key. - Branch Hierarchies: Within each subscribing school, the system supports multiple branch campuses (
branchId), enabling large educational networks to administer campuses independently under one unified executive umbrella. - Data Isolation Enforcement: NestJS guards and Prisma query middlewares automatically inject
schoolIdconstraints on all operations, preventing cross-tenant data leaks.
3. Super Admin Navigation & Shortcuts
- Dashboard (
/superadmin): High-level KPI summaries including total onboarded schools, active student count across all tenants, pending subscription payments, and worker queue backlog. - Schools List (
/superadmin/schools): Detailed institutional records with direct links to school settings, director assignments, and usage quotas. - Subscription Slips (
/superadmin/payments): Queue of uploaded Ethiopian bank deposit receipts (CBE, Telebirr, Awash, etc.) awaiting manual verification and license extension. - Platform Releases (
/superadmin/releases): Publish release notes and feature announcements visible on all school administrative dashboards.
Institutional Policies & Handbooks
Publishing school bylaws, staff handbooks, and official forms with role-based visibility controls in YeneSchool.
Tenant Provisioning
Step-by-step administrator guide for provisioning new school instances, setting up campuses, assigning school directors, and configuring custom domain routing.