Platform Admin Panel
Platform Admin Panel
Section titled “Platform Admin Panel”The platform admin panel is available to platform staff: Xplorr employees, kept as a separate account type from any customer organization’s roles rather than a role a customer can hold. It provides cross-organization visibility and management capabilities for platform operators.
Accessing the Panel
Section titled “Accessing the Panel”Navigate to Platform in the left sidebar of your console. This menu item is only visible to platform staff, who must have a verified email and an enrolled second factor before staff access applies.
Platform Statistics
Section titled “Platform Statistics”The stats dashboard shows aggregate metrics across all organizations:
| Metric | Description |
|---|---|
| Total Organizations | Number of registered organizations |
| Total Users | All users across all orgs |
| Total Cloud Accounts | Connected AWS, Azure, and GCP accounts |
| Total Cost Rows | Volume of billing data ingested |
| Sync Errors | Accounts currently in error state |
| New Orgs (30d) | Organizations created in the last 30 days |
Organization Management
Section titled “Organization Management”Listing Organizations
Section titled “Listing Organizations”The org list shows every organization with key metrics:
- Organization name, slug, and plan (free/pro/enterprise)
- User count, account count, and error count
- Last sync timestamp
- Active/inactive status
Organization Drill-Down
Section titled “Organization Drill-Down”Click any organization to see:
- Users — All members with roles and email addresses
- Cloud Accounts — Connected accounts with provider, status, and sync state
- Cost Summary — Total cost, latest data date, row count, and provider breakdown
Changing Plans
Section titled “Changing Plans”Change an organization’s billing plan from the plan dropdown on its row in the organization list. Valid plans: free, pro, enterprise.
Contacting Organization Admins
Section titled “Contacting Organization Admins”Expand an organization and click Contact admin to email all of its admins. Enter a subject and a message, then click Send.
Deleting an Organization
Section titled “Deleting an Organization”Click Delete on an organization’s row to permanently delete it and all its data.
Deleting a Cloud Account
Section titled “Deleting a Cloud Account”Expand an organization and click Delete next to a cloud account to remove it.
This cascades to: anomaly alerts, alert rules, budgets, recommendations, cost data, sync jobs, network costs, resource inventory, coverage data, and user access grants.
Sync Health
Section titled “Sync Health”The sync health view shows all cloud accounts currently in error state across all organizations. For each account:
| Field | Description |
|---|---|
| Account Name | The user-defined name |
| Provider | AWS, Azure, or GCP |
| External ID | The IAM role ARN, service principal ID, or service account key |
| Status | Error status |
| Sync Error | The error message from the last failed sync |
| Last Synced At | When data was last successfully pulled |
| Organization | Which org owns the account |
Use this to proactively reach out to organizations with broken connections before they notice stale data.
Growth Tracking
Section titled “Growth Tracking”The growth view shows new organization signups per week for the last 12 weeks. Each data point includes:
- Week start date
- Number of new organizations created that week
Usage Metrics
Section titled “Usage Metrics”Per-organization usage for the last 30 days:
| Metric | Description |
|---|---|
| Syncs (30d) | Number of sync jobs run |
| Actions (30d) | Console and integration actions |
| Last Activity | Most recent user activity timestamp |
| Cost Rows | Volume of billing data stored |
| Plan | Current billing plan |
Platform Audit Logs
Section titled “Platform Audit Logs”View audit logs across all organizations. Unlike org-level audit logs which are scoped to a single org, platform audit logs span the entire platform.
Filter by:
- Organization ID — Narrow to a specific org
- Action — Filter by event type
- Limit/Offset — Pagination (max 200 per page)
Active Sessions
Section titled “Active Sessions”View all active sessions (non-revoked, non-expired refresh tokens) across the platform. Shows:
- User email and organization
- Session creation time
- Token expiry
Limited to the 100 most recent sessions.
Impersonation
Section titled “Impersonation”Act as any user for a short time. This is useful for debugging issues reported by customers. Expand an organization and click Impersonate next to the user.
- Creates a 15-minute session flagged as impersonation
- Rate limited to 10 requests per minute
- Logged in the audit trail with full impersonation details
- The impersonation session inherits the target user’s organization and role
Person view
Section titled “Person view”Look up one person across every organization they belong to: their memberships and roles, second factor and passkey status, API token names, last activity, and their sign-in history, successes and failures, with time, IP, browser and country.
Support actions
Section titled “Support actions”From a person’s record, staff can resend a verification or invitation email, mark an email verified, change a user’s email, and hand an organization to a new admin when its only admin has left. Each action is audit logged.
Org health
Section titled “Org health”Plan, billing status, trial end date, seats and accounts used against plan limits, last activity, and sync failures, for any organization.
Permissions
Section titled “Permissions”The role_permissions table that decides what each customer role can do is edited here, as a grid, with locked cells (the hard limits no edit can change) shown with the reason, a preview of a change before it saves, and a reset to defaults. Every edit is audit logged with the before and after values.
Xplorr services read this table in shadow mode by default: the existing per-route checks still decide what happens, and a mismatch between the old check and the table is logged rather than acted on. Switching a service to enforce the table is a configuration change, not a deploy.
Staff management
Section titled “Staff management”List, add by email, and remove platform staff. The last remaining staff member cannot be removed.