Skip to main content
Source snapshot: 13 October 2026. These pages describe the current implementation, including unfinished controls. See coverage and review notes.

​
Platform roles

Host: control.<ROOT_DOMAIN> · Route: /roles

​
Purpose and access

Inspect platform-level permissions and assign or revoke platform access.You need an account session and platform access. Platform privileges are separate from tenant roles; privileged writes remain subject to endpoint role checks.

​
Screen layout

Platform Roles & Permissions shows role summaries and staff assignments. Assign Platform Role asks for a user and SUPER_ADMIN, PLATFORM_STAFF, or PLATFORM_SUPPORT.

​
Fields and displayed information

Displayed table columns: Permission, Identifier Key, SUPER_ADMIN, PLATFORM_STAFF, PLATFORM_SUPPORT, Operator, Contact Email, Phone, Account Status, Action.

​
Fields and filters: Roles permissions view

​
Actions

​
Interaction sequence

Assign Role → choose account and role → Grant Platform Access → refresh. Revoke sends role=null for the selected account.

​
States and rules

These roles apply across the control plane and do not replace tenant roles. The API restricts grant/revoke operations; the role summary is descriptive rather than an editable permission matrix.The rendered action controls bind loading indicators to pending state. Failed API saves keep their documented error/notification path; a loading indicator alone does not establish persistence.

​
Implementation references

Paths below are relative to the application repository. This is source-reviewed behavior, not a recorded browser test.
  • apps/web/src/app/sites/control/(app)/roles/page.tsx
  • apps/web/src/features/platform/roles-permissions-view.tsx
Data and access helpers: apps/web/src/lib/platform.ts, apps/web/src/lib/server-api.ts, apps/web/src/lib/api-client.ts

​
API behavior references

  • apps/api/src/platform/platform-tenant-access.controller.ts
  • apps/api/src/platform/platform.controller.ts
  • apps/api/src/billing/plans.controller.ts
  • apps/api/src/billing/tenant-billing.controller.ts
  • apps/api/src/features/features.controller.ts
  • apps/api/src/features/tenant-features.controller.ts
  • apps/api/src/forms/forms.controller.ts
  • apps/api/src/analytics/analytics.controller.ts
  • apps/api/src/analytics/tenant-analytics.controller.ts