Users

Who may open this application, and what they may do once inside.

There is only one Super Admin

If that account is lost, nobody can grant access, manage users or change system settings, and recovery means editing the database by hand. The application will refuse to demote or deactivate it — but appointing a second Super Admin is the real fix.

Account	Name	Role	Departments	State	Last seen	Actions
COMPANY\DEV_ADMIN you	Dev Super Admin dev_admin@company.local	Super Admin last Super Admin — protected	All, by role	Active	never	Edit
COMPANY\DEV_DELEGATE	Dev Delegate Admin dev_delegate@company.local	Delegate Admin	All, by role	Active	never	Edit
COMPANY\DEV_MANAGEMENT	Dev Management dev_management@company.local	Management	None granted	Active	never	Edit
COMPANY\DEV_VIEWER_GGPMD	Dev Viewer — GGPMD dev_viewer_ggpmd@company.local	Department Viewer	GGPMD	Active	never	Edit
COMPANY\DEV_VIEWER_GSD	Dev Viewer — GSD dev_viewer_gsd@company.local	Department Viewer	GSD	Active	never	Edit
COMPANY\DEV_VIEWER_NGGPD	Dev Viewer — NGGPD dev_viewer_nggpd@company.local	Department Viewer	NGGPD	Active	never	Edit
COMPANY\DEV_VIEWER_SGGPD	Dev Viewer — SGGPD dev_viewer_sggpd@company.local	Department Viewer	SGGPD	Active	never	Edit
COMPANY\DEV_VIEWER_NONE	Dev Viewer (no departments) dev_viewer_none@company.local	Department Viewer	None granted	Active	never	Edit

Accounts are deactivated rather than deleted, so the audit trail keeps a name against everything they did. Disabling a control here is presentation only — every action re-checks on the server and records the refusal.