Operator console

Cross-tenant admin. Authorized operators only — every action is audited.