Platform Administration

Manage the entire Penvio platform as a platform administrator.

Overview

Platform administrators have access to the /admin portal, which provides management capabilities across all organizations and users on the platform. This is distinct from organization-level administration at /org.

Accessing the Admin Portal

1. Log in as a platform admin
2. Click your profile icon in the top-right corner
3. Select Admin Portal (or navigate to /admin)
4. Toggle between admin and user views using the dashboard switch

User Management

Viewing Users

The admin users page (/admin/users) provides:

• Search - Find users by name or email
• Filter - Filter by role, status, or organization
• Sort - Sort by name, email, creation date, or last login
• Pagination - Navigate through large user lists
• Export - Download user data as CSV

User Actions

For each user, platform admins can:

Force Password Change

To force a user to reset their password:

1. Go to Admin > Users
2. Find the user
3. Click the actions menu (three dots)
4. Select Force Password Reset
5. The user will be required to set a new password on their next login

Organization Management

Viewing Organizations

The organizations page (/admin/organizations) shows:

• All organizations on the platform
• Subscription tier for each organization
• Member count and storage usage
• Creation date

Organization Actions

Impersonation

Platform admins can impersonate any user to troubleshoot issues or verify configurations.

Starting Impersonation

1. Go to Admin > Users
2. Find the target user
3. Click the actions menu
4. Select Impersonate
5. Confirm the impersonation

During Impersonation

• A banner appears at the top of the page indicating you are impersonating a user
• You see the platform as that user would see it
• All actions are logged with impersonatedBy context in the audit trail
• You have the same permissions as the impersonated user

Ending Impersonation

• Click End Impersonation in the banner
• You are returned to your admin session
• An IMPERSONATION_END audit event is logged

Audit Trail

Impersonation events are tracked with:

• IMPERSONATION_START - When impersonation begins (records admin ID and target user)
• IMPERSONATION_END - When impersonation ends
• All actions during impersonation include the admin’s identity

Ownership Transfer

Platform admins can initiate ownership transfer for any organization.

Initiating Transfer

1. Go to Admin > Organizations
2. Find the organization
3. Click Transfer Ownership
4. Select the new owner (must be a member of the organization)
5. Confirm the transfer

Transfer Process

1. A transfer request is created with a secure token
2. The current owner receives an email with a confirmation link
3. The current owner must click the link and confirm the transfer
4. Once confirmed, ownership is transferred to the new owner
5. The previous owner becomes an Admin

Transfer Safeguards

• Transfer requires email confirmation from the current owner
• Transfer tokens expire after 72 hours
• Both OWNERSHIP_TRANSFER_REQUEST and OWNERSHIP_TRANSFER_COMPLETE audit events are logged
• Only one pending transfer per organization at a time

Document Management

The documents page (/admin/documents) allows platform admins to:

• Browse all documents across all organizations
• View document details and metadata
• Download documents for compliance or support purposes

Platform Statistics

The admin dashboard provides platform-wide statistics:

• Total users and growth trends
• Total organizations by tier
• Document counts and storage usage
• Active users over time

Next Steps

• Organization Admin - Organization-level administration
• Members - Managing organization members
• Audit Logs - Viewing audit trails
• Security - SSO and SCIM configuration