User management, teams, and workspace configuration.
High-risk administrative actions (bulk record purge and sandbox reset) require explicit typed confirmation.