From 128ca9bfc7379b834e6f0c5c654fb0c70ec04088 Mon Sep 17 00:00:00 2001
From: Hendrik Belitz <hendrik@innovation-through-understanding.de>
Date: Mon, 2 Feb 2026 13:44:24 +0100
Subject: [PATCH] First user of tenant gets access granted, regardless of role.

---
 src/lib/server/services/user-service.ts | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/src/lib/server/services/user-service.ts b/src/lib/server/services/user-service.ts
index e9b4f44..508e4cf 100644
--- a/src/lib/server/services/user-service.ts
+++ b/src/lib/server/services/user-service.ts
@@ -359,12 +359,7 @@ export class UserService {
       const numberOfUsers = await centralDb
         .select({ count: count() })
         .from(centralSchema.user)
-        .where(
-          and(
-            eq(centralSchema.user.tenantId, resultData.tenantId!),
-            eq(centralSchema.user.role, "TENANT_ADMIN"),
-          ),
-        );
+        .where(and(eq(centralSchema.user.tenantId, resultData.tenantId!)));
 
       const shouldGrantAccess = resultData.role === "GLOBAL_ADMIN" || numberOfUsers[0].count === 1;
       const confirmationState = shouldGrantAccess ? "ACCESS_GRANTED" : "CONFIRMED";