Central-only routes under Super → Tenants let staff list organizations, open a tenant (including an interactive Domains panel for custom hosts), suspend or reactivate it, archive (soft-delete), or provision a new tenant when TENANCY_ENABLED is true. Provision tenant previews {slug}.{apex} from platform settings and can mark a demo organization before create. Super → Platform domains (/super/tenants/settings) edits platform-wide host settings (central hosts, tenant subdomain apex, custom-domain CNAME target, DNS verification prefix) and shows the effective merged configuration for operators. Access requires the Spatie permission super.tenants; it is not granted automatically to every tenant admin role.

Use the Switch tenant link in the main navigation when you have two or more active memberships; it opens the tenant picker on a configured central hostname.

On a tenant detail page, add a custom domain, copy the TXT and CNAME targets from the DNS instructions (using Super → Platform domains settings), then Verify DNS. Super operators can Force verify without live DNS. Set primary chooses the default host; Disable or Delete apply to custom domains that are not protected (company subdomains stay locked).

Operator details (hosts, export, purge, suspension) live in the tenancy runbook shipped with the app (docs/tenancy.md).