Platform governance

Administration

Govern access, permissions, audit evidence and the active platform controls from one workspace.

Access boundaryAdministrators only

Access governance

Users

Create accounts, change canonical role assignments, reset passwords and deactivate access.

Checking

User accounts

The established account workflow is retained with its administrator API controls.

Manage user accounts

Regional access

Assign each permitted account to the correct operating region and asset scope.

Manage regional access

Access model

Roles

Canonical account roles are fixed by the authentication contract. Assignments are changed through User accounts.

Checking

Loading role definitions

Enforced access

Permissions

This matrix reflects the active page-level RBAC boundary. It is descriptive and cannot weaken the server-side controls.

CapabilityClientManagerAdministrator
Client condition reportingAllowedAllowedAllowed
Diagnostic reviewView permitted evidenceAllowedAllowed
Model assurance decisionsNot allowedReview stagesFull release authority
Hardware administrationNot allowedAs explicitly permittedAllowed
User, role and platform administrationNot allowedNot allowedAllowed

Traceability

Audit

Separate configuration changes from authentication events while retaining both records.

Configuration audit

Review actors, actions, affected records and timestamps for governed configuration changes.

Open configuration audit

Login audit

Review successful and failed access events for platform accounts.

Open login audit

Controlled configuration

Platform controls

Active Production administration routes are retained and grouped without restoring archived dashboards.

System configurationAssets, departments, alerts and site settings Server configurationService status and host configuration Data integrationSources, mappings and import history Licence managementTenant entitlement and validity HardwareCollectors, sensors and commissioning Equipment classificationAuthoritative rated power, foundation, machine class, evidence and approval Model assuranceValidation, release and lineage governance

Route governance

Hidden route register

These routes remain directly reachable for compatibility or controlled workflow use. They are intentionally absent from active navigation.

RouteClassificationReason hidden
/online-systems.htmlLegacy operationsMonitoring inventory is consolidated under Hardware
/scada-integration.htmlLegacy administrationSource and mapping controls are consolidated under Data integration
/sensor-import.htmlLegacy administrationHardware onboarding is consolidated under Hardware
/equipment-lifecycle-admin.htmlWorkflow-specificOpened from approval notifications when a service-state decision is required
/07-hardware.html, /08-online-systems.html, /10-system-config.html, /11-ai-console.html, /15-scada-integration.html, /16-hardware-admin.html, /22-login-audit.html, /23-user-regions.html, /24-server-config.html, /25-data-integration.html, /26-license-management.html and /27-sensor-import.htmlCompatibility aliasesRetained for historical links with the same role boundary as each canonical page
/ehi.html, /plant-dashboard.html and /asset-dashboard.htmlArchivedExplicitly retired from the Demo operating model