Admin Operations — Support Tools

The Admin Operations page is the hub for platform support staff. It's only available to authorized administrators, and the page header makes the ground rule clear: "Support tools — all actions are audited." Every lookup and every action you take from this page is recorded in the audit trail, along with the reason you gave.

Note: if the tools are currently unavailable, the page shows "Support tools are not available right now." — the admin tooling is released gradually.

User Lookup

The User Lookup card at the top of the page lets you look up a user account by email address.

1. Enter the user's email address (for example, user@example.com).
2. Enter a reason for the lookup — required and audited. A support ticket number is a good reason; the field suggests "e.g. support ticket #42".
3. Click Lookup — it shows "Searching..." while the request is in flight.

On success, the result card shows the user's ID, email, and plan badge. The reason is recorded with the lookup event, so every lookup can be accounted for later.

The quick-action cards

The page is a single column: the User Lookup card on top, followed by six quick-action cards that open the rest of the admin tooling:

• Workflows — "View & reprocess workflow runs"
• Audit Logs — "Search audit trail"
• Entitlements — "Grant compensatory credits"
• Privacy Requests — "Export & deletion tracking"
• Partner Applications — "Audited review queue"
• SRE Health — "System health & queues" (opens in a new tab — a real-time operational surface rather than an in-app page)

The admin sub-pages

User Management

Look up users and manage retention. The page shows Pending Retention actions — load them and work through them; every action is audited.

Audit Logs

Search the audit trail with filters for Actor, Action, Resource type, Outcome (Any / Success / Warning / Critical) and date range. Results are redacted — sensitive values never leave the audit store ("Metadata redacted"). Export CSV downloads audit-log-export-YYYY-MM-DD.csv. Empty states: "Run a search" / "No matching events".

Entitlements

Grant compensatory credits — the tool for making up for an issue that consumed a user's allowance. Target user ID, amount, and reason are required; an expiry is optional. Grants are idempotent and audited, and the result line confirms what was granted.

Incident Response

Kill switches, queue control, and provider management — every action is audited at critical severity:

• Kill Switch — disable (kill) or enable (restore) a feature flag, with a reason.
• Queue Control — pause or resume the background job queue (default background_jobs).
• Provider Control — disable an AI provider.
• Feature Flag Rollouts — current rollout status for P4 feature flags, with kill-switched badges, rollout percentages, and canary counts.

Integrations

Manage webhook endpoints and API integrations — all actions audited:

• Webhooks — outbound webhooks for subscription lifecycle events, usage alerts, and workflow state changes. Delivered with HMAC signatures; retries are automatic.
• API Integration Status — the Integration API, its feature flag, and SSO / OIDC status (OIDC available; SAML pilot-gated).

Workflow Runs

Reprocessing re-runs a workflow safely. Each row shows the workflow id, resource, attempt count, last error, and status. Reprocess asks for a reason (required), then confirms: "Reprocess requested for {id} — {status}."

Privacy Requests

Export & deletion tracking — requests are recorded at critical audit severity. Start a New request (Target user ID, type Export / Delete / Correction, notes optional), then track the Request lifecycle: pending, processing, completed, failed, or cancelled — adding an evidence note (e.g. archive id, deletion job) and artifact reference at each step.

Partner applications

The audited review queue — every action records the actor, reason, and before/after state. Approving a partner grants zero career-data access. Cards show partner type, application status (Applied / Under review), terms version and date, audience, region, and payout terms, with Start review / Approve / Reject actions and a required audit reason. When the queue is empty: "Queue is empty." If the review tools are disabled, the page says "Partner application review is not available right now."

When payout controls are enabled, the page also shows:

• Payout controls — pause or end payouts by scope (Partner, Campaign, or all), with a pause reason.
• Commission ledger — adjust commission (delta in paise, e.g. -5000) with a reason, and filter by state (On hold, Available, Payout queued, Paid, Payout failed, Reversed).

Who this page is for

This page is for support and operations staff. It is not part of the regular member experience. If you're a regular user looking for your own account controls, the Settings page is the right place.

Good to know

• Everything is audited — nothing on this page is silent. Lookups require a stated reason, and that reason is kept with the event.
• Because every action is recorded, you can hand off an investigation to a colleague by pointing them at the audit log entry.
• A typical investigation: look up the user (with a reason), check the audit logs for their events, then use Workflows or SRE Health if the cause looks systemic rather than user-specific.
• When in doubt, the audit trail is the source of truth: if you're unsure what happened, start there.