diff --git a/packages/services/auth-service/src/interfaces/rest/controllers/tenant.controller.ts b/packages/services/auth-service/src/interfaces/rest/controllers/tenant.controller.ts
index 5e71f82..ac0f6a8 100644
--- a/packages/services/auth-service/src/interfaces/rest/controllers/tenant.controller.ts
+++ b/packages/services/auth-service/src/interfaces/rest/controllers/tenant.controller.ts
@@ -397,7 +397,7 @@ export class TenantController {
    * DELETE /api/v1/admin/tenants/:id
    */
   @Delete(':id')
-  @Roles('platform_super_admin')
+  @Roles('platform_admin', 'platform_super_admin')
   async deleteTenant(@Param('id') id: string) {
     const tenant = await this.findTenantOrFail(id);
 
@@ -409,8 +409,14 @@ export class TenantController {
       this.logger.error(`Failed to deprovision schema for "${tenant.slug}":`, err);
     }
 
-    // 2. Delete all invites for this tenant
-    await this.inviteRepository.delete({ tenantId: id });
+    // 2. Delete related records (use slug — invite.tenantId stores slug)
+    await this.inviteRepository.delete({ tenantId: tenant.slug });
+    await this.dataSource.query(
+      `DELETE FROM public.users WHERE tenant_id = $1`, [tenant.slug],
+    );
+    await this.dataSource.query(
+      `DELETE FROM public.api_keys WHERE tenant_id = $1`, [tenant.slug],
+    );
 
     // 3. Delete the tenant record
     await this.tenantRepository.remove(tenant);