Platform admin console — overview
The platform admin console is ActionConnect staff-only tooling. It operates the control plane: the systems that create and manage organizations (tenants). It is never exposed to tenants and is entirely separate from the in-app admin/settings area that tenant admins use.
WARNING
This section is for ActionConnect platform staff only. If you are a customer or a tenant admin, the controls described here are not available to you — see the Admins guide instead.
What the console is for
The console manages tenants from the outside — it does not do day-to-day support work inside a tenant. Its responsibilities are:
- Tenant management — list and search organizations, view provisioning status and health, and create, suspend, resume, or de-provision them.
- Plans & billing — manage plans, subscriptions, and seats (billing is staff-managed).
- Audit & impersonation — review a full audit log of every console action, and use time-boxed impersonation to support a customer.
Strong authentication and isolation
Access requires strong authentication — single sign-on plus an admin role gate. The console works against the control plane (the shared registry of tenants, plans, and provisioning state). It cannot read or write a tenant's data except through an explicit, audited, time-boxed impersonation grant. Every action staff take in the console is fully audited.
The control plane vs. tenant data
ActionConnect uses database-per-tenant isolation: each organization has its own database, and the console never queries them directly. Instead, the console reads and writes a separate control-plane registry that tracks each tenant's status, resources, plan, and provisioning history. This keeps staff tooling structurally separated from customer data.