Hatua internal admin

Billing support operations

Internal controls

Controls for billing support, impersonation, and access boundaries.

Internal access

Role gates must be enforced by Supabase RLS and app auth

Super admin + billing support

Impersonation

Requires reason, expiry, and audit event

Ticket-bound only

Billing boundary

No school tuition or fee invoice operations

Hatua subscriptions only