Platform
Platform admin console
Operate the installation across workspaces from /admin: inspect users and workspaces, manage jobs and partner keys, review audit history, and control platform access after recent re-authentication.
On this page
Start here
The platform admin console is for installation-wide operations that cross workspace boundaries: inspecting accounts, managing jobs, auditing platform actions, assigning platform roles, and issuing marketplace partner keys. It is deliberately separate from workspace administration and requires recent authentication.
Before you begin
- A database-backed user account with users.admin set to true
- The appropriate platform_role and a session authenticated within the last 10 minutes
Put it into practice
-
Re-authenticate and enter
Open /admin and complete the sign-in prompt when the sudo window is stale. Never share or reuse another administrator's browser session.
-
Choose the narrowest tab
Inspect overview, workspaces, users, operations, audit, access, or partners according to the task. Confirm the target before retrying jobs or changing access.
-
Perform and verify the action
Make the smallest authorized change, save any partner secret immediately because it is shown once, and review platform audit or operation status for confirmation.
The platform-wide task is completed against the intended target, the action is attributable in audit history, and one-time credentials are stored without exposing them to workspace users.
01 Tabs
reference| Path | Purpose |
|---|---|
| /admin | Overview |
| /admin/workspaces | Workspace list |
| /admin/users | User list |
| /admin/operations | Job retry/cancel plus maintenance tasks: billing_sync, data_retention, eval_schedule, fleet_alerts, stale_robots |
| /admin/audit | Platform audit |
| /admin/access | platform_role: viewer, operator, owner |
| /admin/partners | Issue, scope, rotate, or suspend marketplace partner mpk_ keys. The secret is shown once. |
02 Access
detailsSudo window
require_platform_admin redirects to /users/log-in with "Re-authenticate to enter the platform console" when the session is older than 10 minutes. Mutations use the same -10 minute sudo check.
Troubleshooting
- Opening /admin returns to sign-in
- The session may be older than the 10-minute sudo window even though the user is otherwise signed in. Re-authenticate and try again.
- A tab or mutation is unavailable
- Confirm users.admin and platform_role. Workspace owner or admin membership does not grant platform access.
- A partner secret cannot be recovered
- Plaintext mpk_ values appear only on issue or rotation. Rotate the key and update the partner securely rather than trying to reveal the old value.