Platform operators (control plane)

The control plane at /platform is where the people who run an Enclessa installation look after every organisation on it: organisations and their state, plans, partner apps, account recovery, final deletion and the operators themselves. It is not the same as an organisation's system console at /admin (see administration.md).

An operator is a separate identity. Operators have their own sign-in, their own table and their own cookie, and the control plane shares no navigation or session with the product. The control plane shows counts, dates and states. It cannot read any message, document or file. Every action, and every time an operator looks at an organisation, is written to the platform audit log. A banner at the top of every screen says so.

Where to find itCopy Anchor Link

• Sign in at /platform/login with an operator email, password and second-factor code.
• The top bar holds the sections Overview, Organisations, Accounts, Plans, Partner apps, Audit, Deletion, Operators and Settings. The signed-in operator's email and role are shown on the right.

1234

1. 1SectionsOrganisations, accounts, plans, partner apps, audit, deletion, operators and settings.
2. 2Signed-in operatorYour operator email and role.
3. 3Audit noticeEvery action, and every look at an organisation, is written to the platform audit log.
4. 4SuspendedEach state counter opens the organisation list filtered to that state.

Main workflowsCopy Anchor Link

See what the installation is carryingCopy Anchor Link

Overview (/platform) shows what the installation is carrying right now: organisations by state, and revenue. Each state counter opens the organisation list filtered to that state.

Find an organisation and act on itCopy Anchor Link

1. Open Organisations (/platform/organizations). Search, or filter by state: Onboarding, Active, Suspended, Banned, Being deleted or Deleted. If nothing matches, Clear filters brings back the whole list.
2. Open an organisation to see its subscription, its retention and its usage. Usage is rolled up once a night.
3. Choose an action and give a reason. The reason is shown to the organisation's own members, in your words.
   • Suspend: members can still read but cannot write, and they see your reason on every screen. Lift the suspension reverses it.
   • Ban: nobody can sign in at all. This is harder than a suspension and meant for abuse. Lift the ban reverses it.
   • Schedule deletion: the organisation is read-only for seven days, then every row and every file is destroyed. You can cancel until then, but not afterwards.
4. Subscription: put the organisation on a plan or change its plan.
5. Retention: set how long the organisation keeps what it holds. Zero means keep forever, which is the default.

1234

1. 1SuspendMembers can still read but not write, and see your reason on every screen.
2. 2BanNobody can sign in at all. Meant for abuse.
3. 3Schedule deletionRead-only for seven days, then everything is destroyed. You can cancel until then.
4. 4Move to a planChoose the plan, give a reason, then select Move this organisation.

Help a person who cannot sign inCopy Anchor Link

Accounts (/platform/accounts) resets the second factor of an account. Enter the email and a reason, and confirm. An organisation's own administrator can reset an account that belongs only to their organisation; every other account is reset here. Support operators can see this page but cannot act on it.

Manage plansCopy Anchor Link

Plans (/platform/plans) lists what the installation sells. These plans are what the product checks features against, what the price list publishes and what invoices are drawn from. A new plan sells nothing until it is on sale and something points at it.

Review partner appsCopy Anchor Link

Partner apps (/platform/apps) is where you register an app for its publisher, submit its versions, review each version, and delist an app that must stop everywhere. An approved version cannot be changed. A version that asks for more access waits in each organisation until an administrator there consents.

Read the operator audit logCopy Anchor Link

Audit (/platform/audit) shows the last thirty days of operator actions, filtered by time.

Delete an organisation for goodCopy Anchor Link

Deletion (/platform/purge) lists organisations whose deletion was scheduled and whose grace period has passed. To purge one, type its slug exactly. This removes every row and every file belonging to the organisation. There is no undo, and no backup is taken first.

1234

1. 1The organisationIts deletion was scheduled and its grace period has passed.
2. 2Type the slug to confirmThe organisation’s slug, typed exactly.
3. 3ReasonWhy it is purged, for the platform audit log.
4. 4Purge permanentlySlide it to the end to remove every row and every file. There is no undo.

Manage operatorsCopy Anchor Link

Operators (/platform/operators) lists who may act on every organisation on this installation. Only an owner can change this list.

1. Add an operator with a password of at least twelve characters. Hand the password over in person, because nothing is sent by email.
2. Give the operator a role: Owner, Operator or Support.
3. Under sessions, see every operator credential in use. Ending one takes effect on its next request.

Installation settingsCopy Anchor Link

Settings (/platform/settings) holds the installation's own policy, not any one organisation's:

• Default plan: the plan a sign-up lands on when it names no plan. Without one, an installation that takes payments refuses those sign-ups.
• Audit retention: how long an operator audit entry lives, at least 90 days.
• Blocked domains: nobody may register an organisation with an email address at these domains.

RolesCopy Anchor Link

TipsCopy Anchor Link

• An organisation's members see the reason you give for a suspension or ban, so write it for them.
• Scheduling a deletion can be undone for seven days. A purge cannot be undone at all.