Operations dashboard
The system admin landing page at /admin that summarizes tenants, subscriptions, revenue, failed payments, usage anomalies and operational failures across the platform.
Organizations
How system administrators list, create, edit, disable and delete tenant organizations under /admin/organizations.
Operations dashboard
The system admin landing page at /admin that summarizes tenants, subscriptions, revenue, failed payments, usage anomalies and operational failures across the platform.
Organizations
How system administrators list, create, edit, disable and delete tenant organizations under /admin/organizations.
How system administrators list, invite, edit, disable, ban and delete platform users, and assign system and organization roles, under /admin/users.
Admin Users is the platform-wide user directory at /admin/users. It lists every user across all organizations, shows their access, and gives system administrators lifecycle tools that tenant admins do not have.
The page has two tabs:
| Tab | Route | Purpose |
|---|---|---|
| Users | /admin/users | Every user profile on the platform. |
| Pending invitations | /admin/users/invitations | Invitations that grant a system role. |
Organization-scoped user management for tenant admins lives at /{orgSlug}/users. See Access control.
system.* permissions and is managed only here.The Users tab shows Name, Email, Role, Organizations, Joined and Last active. Search by name or email with Search users…, sort by Name, Email, Joined or Last active, and narrow the list with Filters:
Open a row, or use the row menu to Open the user or Copy email.
The user detail page at /admin/users/{userId} has four sections.
Change the profile photo, first name, last name and username. Photos accept PNG, JPEG or WebP up to 5 MB and can be cropped before upload. Usernames use lowercase letters, numbers and underscores, with at least 3 characters.
This table lists every organization the user belongs to, with the role and join date. Change the role in a row and select Save to update it.
The first row, labeled with the product name and "System-wide organization", holds the user's system role. Pick a system role there to grant platform access, or choose None to remove it.
A read-only summary of email, username, account creation time, last activity, organization count, system roles, CentraKit access (Enabled or Disabled) and sign-in state (Allowed or Banned).
| Action | Effect |
|---|---|
| Disable user | Blocks CentraKit access without touching the auth account. Enable user restores it. |
| Ban user | Blocks authentication in Supabase Auth. Unban user lets the user sign in again. |
| Delete user | Permanently deletes the user. You must type the confirmation text before deleting. |
The admin tools protect against lockouts. You cannot disable, ban or delete your own user, and you cannot disable, ban or delete the last active system admin.
/admin/users/invitations/create.The invitee receives an email with a link to /invitations/{token}. If the email cannot be sent, the invitation is still saved and the error is shown, so you can resend it later.
The Pending invitations tab lists Email, Role, Sent and Expires. Filter by status (Active or Expired) and search by email.
/admin/users/invitations/{invitationId} to edit its details while it is still pending.Accepted invitations can no longer be edited.
| Key | Effect |
|---|---|
system.admin.access | Opens the admin area. |
system.users.view | Reads platform users. |
system.users.manage | Invites, edits, disables, bans and deletes users, and changes their roles. |
Both System Admin and System Support include system.users.manage. Every admin user mutation, including denied attempts, is recorded in the audit log.
Last updated on
Operations dashboard
The system admin landing page at /admin that summarizes tenants, subscriptions, revenue, failed payments, usage anomalies and operational failures across the platform.
Organizations
How system administrators list, create, edit, disable and delete tenant organizations under /admin/organizations.