Navigation model

The Admin Console is a single-page shell. Almost all screens live under /admin-console and are selected with URL hash state, not separate path routes.

Levels

L1 Tenants > L2 Product overview > L3 Protocol instances > L4 Instance detail
Resource products sit beside protocols (flat left area bar), not under L4.

Level	What you see
Platform > Tenants	Register and open tenants (platform operator)
Platform > Overview	Product landing for the selected tenant
Protocols	Authorization Server, Credential Issuer, Credential Verifier instances
Resources	Cross-cutting products: KMS, DID, designs, status lists, secrets, …

Hash parameters

Param	Meaning
tenant	Active tenant id/slug context
surface	Protocol surface: as, issuer, verifier
instance	Protocol instance id
area	Left-bar area inside an instance (e.g. settings, credentials)
tab	Settings section tab (e.g. tokens, metadata)
resource	Resource product key (e.g. kms, did)
rarea	Resource left-bar area (e.g. providers, identifiers)

Examples:

#resource=kms&rarea=providers
#tenant=…&surface=issuer&instance=…&area=credentials
#tenant=…&surface=as&instance=…&area=settings&tab=tokens

Deep links are stable documentation anchors: every console reference page lists its hash pattern.

Protocol instance areas

Surface	Areas
AS	Features, Settings, Clients, Users
Issuer	Settings, Issuance defaults, Issuer design, Credentials, Templates, Test
Verifier	Settings, DCQL bindings, Templates, Test

Settings areas expose tabs (token settings, issuer metadata, verifier client, …). Some AS tabs are feature-gated until the matching feature is enabled.

Resource products

Resource	Typical areas
Key Management	Providers, Keys, Certificates
DID Management	Identifiers, Methods
Credential Designs	Designs, Issuer designs, Render variants, Assets
Status Lists	Lists
DCQL Queries	Queries
Trust domains	Domains, Policy
Secrets	Storage, provider/policy tabs (platform vs tenant)
Branding / Email / Audit / License	Product-specific areas

Visibility depends on platform vs tenant context and license capabilities.

Full inventory

Every screen id is listed in the console reference index and in the machine-readable screen catalog shipped with the admin-console package.