Vendor console
Multi-tenant operations directory — metadata only (plan, status, volumes, health). No customer behavioural data: data access happens exclusively via explicit, audited, read-only and time-boxed impersonation.
Tenancy governance
Provision sub-account
Create a child workspace under this agency. Region is a first-class attribute set at provisioning.
Impersonate a workspace
Read-only, time-boxed and fully audited. The owner sees a persistent banner for the entire session.
Active impersonation sessions
No active or recent impersonation sessions.