Admin Panel
User Management & Access Control
Manage Organizations
Create and manage organization accounts
Manage Users
Create and manage user accounts
Applications
Manage application access per organization
Licences are counted in two pools — standard users and organization admins — and each is enforced separately when a seat is granted. Leave a box blank for no cap.
Orbit Database
Database & Technical Documentation
| Table | Description | RLS | Realtime | Delta on Reconnect | Version | Mutex | Delta Sync | API Type | Endpoint | Methods | Auth |
|---|
Column Definitions:
- RLS: Row Level Security for multi-tenant isolation
- Realtime: PRIMARY sync - instant push via Supabase subscriptions
- Delta on Reconnect: SAFETY NET - fetches missed updates
- Version: Optimistic locking via version column
- Mutex: Concurrent save protection with queue
- Delta Sync: Incremental sync using updated_at timestamp
- API Type: Supabase SDK, RPC, or Edge Function
- Endpoint: REST API path for the table
- Methods: Supported HTTP methods
- Auth: Required authentication level
Architecture: Realtime-first with delta fetch on reconnect as safety net. Periodic polling has been removed.
| Table | Version Check | Cross-Tab | Sync Pause | Optimistic | Batch | Lazy Load | LocalStorage | Foreign Keys | Notes |
|---|
Column Definitions:
- Version Check: Function that validates record version before update
- Cross-Tab: BroadcastChannel sync between browser tabs
- Sync Pause: Pauses polling during UI interactions
- Optimistic: UI updates before server confirmation
- Batch: Multiple entities saved in single transaction
- Lazy Load: Data loaded on-demand with pagination
- LocalStorage: Data cached locally for offline resilience
- Foreign Keys: References to parent tables (cascade behavior)
Lumen Database
Performance & Appraisal Technical Documentation
| Table | Description | RLS | Realtime | Version | API Type |
|---|
Chronos Database
Timesheet & Time Tracking Technical Documentation
| Table | Description | RLS | Realtime | Version | API Type |
|---|
Vellum Database
Wiki & Documentation Technical Documentation
| Table | Description | RLS | Realtime | Version | API Type |
|---|
Tempo Database
Leave Management Technical Documentation
| Table | Description | RLS | Realtime | Version | API Type |
|---|
Vector Database
Business Process Management Technical Documentation
| Table | Description | RLS | Realtime | Version | API Type |
|---|
Ledger Database
Expense Management Technical Documentation
| Table | Description | RLS | Realtime | Version | API Type |
|---|
Prism Database
Vendor Management Technical Documentation
| Table | Description | RLS | Realtime | Version | API Type |
|---|
Maven Database
Training & Upskilling Technical Documentation
| Table | Description | RLS | Realtime | Version | API Type |
|---|
Audit Log
Every recorded action, across every organisation. Append-only.
| When | Organisation | Actor | Action | Entity | Details |
|---|
Access Review
Who holds super admin, and who can reach which organisation.
Super administrators
Read from is_super_admin() itself. These accounts are exempt from row-level
security in every organisation. Since 20260803180000 the roster is DATA —
see the grants below — with two hardcoded addresses kept as an un-revokable floor, so
that an empty roster can never leave nobody able to grant.
| Address | Source | Granted by | Expires | Last sign-in |
|---|
Platform administration grants
A grant is live until it is revoked or its expiry passes — expiry needs no action, so a time-boxed elevation closes itself. Revoking a grant for one of the two bootstrap addresses removes the row and does not remove their access; that floor is deliberate, and it is what stops an empty roster locking everyone out.
| Address | State | Granted by | Expires | Justification |
|---|
Organisation access
| User | Organisation | Role | Status | Joined | Last sign-in | Last activity |
|---|
Data Retention
How long each category of personal data is kept, per organisation.
Sensitive audit entries are kept four times as long as the audit period. Presence and wiki recent-views tables carry no organisation or timestamp column and cannot be swept by this mechanism; approval trails and invoices are retained under Art. 17(3)(b).
| Organisation | Category | Tables | Keep for | Enabled | Last run |
|---|
System Status
Monitor system health, performance, and recent errors
Recent Errors (Last 24 Hours)
0 errors| Time | Type | Message | User | Context |
|---|---|---|---|---|
|
No errors in the last 24 hours
|
||||
Environment Info
Quick Actions
My Account
Manage your Super Admin account settings
Current Account Details
Account Status
Update Profile
You will need to re-login after changing your email
Alphanumeric and underscores, min 3 characters
Security
Change which organization you belong to
Important Notice
Changing your email will require you to log in again with the new email address.
Make sure to update the
superAdminEmails array in
both index.html and
admin.html
to include your new email for continued Super Admin access.