Organization Settings

Organization Settings is foundational to the multi-tenant architecture. Without a dedicated settings surface, each organization is locked into a generic configuration that fails to reflect their operational realities. The support-access grant mechanism - time-bounded access for Norse Global Admins - is a hard tenant-isolation requirement: without it, Global Admins either have no support path or unchecked permanent access, both unacceptable. This feature enables compliance with data governance expectations across all four partner organizations and reduces support overhead by giving Org Admins self-service control. It anchors onboarding for every new tenant.

Organization Settings is backed by the organization_settings table (one-to-one with organizations). The Admin Web Portal renders it as a server-side-rendered Next.js page under /admin/settings. Support access grants must enforce expiry server-side, not just UI-side, and every grant or revocation must emit an audit_log entry. Fields should use optimistic updates with server validation. The page is gated behind Org Admin and Global Admin roles. Version the settings schema to support non-breaking additions as new modules are introduced. WCAG 2.2 AA compliance required for all form elements.