---
id: SCR-PFM-SEC-026
title: HQ workspaces list
route: /hq/tenants
surface: console
product_area: platform
module: security
revision: 1
status: draft
design_intent: proposed
implementation_evidence: observed
inference: []
source_sha:
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
purpose: Search and filter HQ workspaces and open permitted provisioning or entry actions.
supports:
- JNY-PFM-SEC-001
- CAP-PFM-SEC-002
permission: hq.tenants.read
entry_from:
- /hq
exits_to:
- /hq/tenants/{id}
- /hq/tenants/provision
- /console/{tenantId}
displays:
- field: Workspace/customer names, type, business status and lifecycle, with search, type/status filters and
    paged results.
  source: listHqTenants (DOM-PFM-SEC-002)
  provenance: observed
actions:
- label: Provision a workspace
  operation_id: (navigates to the wizard)
  permission: hq.tenants.provision
  confirm: false
  provenance: observed
  source: react-console:components/console/hq/tenants-list.tsx
- label: Pin
  operation_id: pinMyHqTenantShortcut
  permission: hq.tenants.read
  confirm: false
  provenance: observed
  source: react-console:components/console/hq/tenants-list.tsx
- label: Enter
  operation_id: recordMyHqTenantShortcutOpened
  permission: hq.tenants.read
  confirm: false
  provenance: observed
  source: react-console:components/console/hq/tenants-list.tsx
states:
- loading
- empty
- error
validation:
- BR-CAP-PFM-SEC-002-12
patterns:
- StaffOnly
- PageLayout
- PageHeader
- Workspace filter controls
component: components/console/hq/tenants-list.tsx (TenantsList)
evidence:
- 'react-console at baf6dae: components/console/hq/tenants-list.tsx; the page route file; lib/security/api.ts,
  lib/hq/platform-ops.ts, lib/hq/platform.ts, lib/auth/*'
examined_at: '2026-10-23'
examiner: codex
controls: [TC-AVL-001, TC-AVL-005, TC-AZ-001, TC-AZ-002, TC-AZ-003, TC-AZ-004, TC-AZ-005, TC-AZ-006, TC-DAT-001, TC-DAT-002, TC-DAT-003, TC-DAT-004, TC-IAM-001, TC-IAM-002, TC-IAM-003, TC-IAM-004, TC-IAM-005, TC-LOG-001, TC-LOG-004, TC-LOG-005, TC-MON-001, TC-PI-001, TC-PI-003, TC-PI-005, TC-PRV-001, TC-PRV-002, TC-TEN-001, TC-TEN-002, TC-TEN-003, TC-TEN-004, TC-VEN-001, TC-VEN-002, TC-VEN-003]
---

# HQ workspaces list

## What the Screen Is For

Search and filter HQ workspaces and open permitted provisioning or entry actions.

## What It Shows and Lets People Do

Workspace-reading authority controls the list. Provisioning authority controls wizard navigation; pin and entry actions use workspace-reading authority and their dedicated shortcut operations.

## States and Errors

The list displays lifecycle alongside business status but filters through the supported list fields. It does not offer an independent lifecycle transition control.

The state rows describe observed loading, empty, refusal or inactive handling where present. Linked validation rules belong to the planning layer; client feedback and authoritative service checks have distinct responsibilities.

## Patterns It Must Respect

The pattern list names the built shared components and interaction patterns checked for this screen. This contract describes the existing screen; it supplies no replacement visual design.