Admin guide

The Super Admin console lives at /admin. Only users with a platform role can open it, and every action there is written to the audit log.

Granting access

Platform roles are granted from a trusted shell, never from the web UI:

npm run admin:grant -- ops@example.com                  # super_admin
npm run admin:grant -- agent@example.com platform_support
npm run admin:grant -- ops@example.com --revoke

The user must have registered first.

What you can do

• Users and workspaces. Search, view details, suspend or reactivate. A suspended workspace can't be opened by its members.
• Products and licenses. Manage the marketplace catalog, license terms and issued licenses, including revoking a license.
• Plans. Edit plan prices, features and limits. Changes apply to entitlements immediately.
• Content. Help center articles and FAQ in English and Arabic, plus page templates.
• Support. The ticket queue with internal notes and replies.
• Feature flags. Turn ai_enabled, community_enabled and the other flags on or off globally.
• Settings. Maintenance mode (admins keep access) and platform configuration status.
• Audit log. Filter by actor, workspace or action.

Scheduled work

Run npm run worker as a separate process in production. It sends emails, runs automations, applies subscription lifecycle changes (trial end, grace periods, license expiry reminders) and cleans up expired data.