Admin Panel

The admin panel provides global administration capabilities for managing the entire platform. Access is controlled by global-level permissions.

Features

• User management: View, search, and manage all users
• Organization oversight: View all organizations, their members, and settings
• Team oversight: View all teams on the platform
• Role management: Create and edit custom roles with granular permissions
• Group management: Manage permission groups for bulk role assignment
• Plan management: View and update pricing plans
• File management: View and manage uploaded files

Frontend Routes

Route	View	Description
/admin	AdminDashboardView	Admin panel overview
/admin/users	AdminUsersView	User management
/admin/roles	AdminRolesView	Role management
/admin/groups	AdminGroupsView	Permission group management
/admin/organizations	AdminOrgsView	Organization oversight
/admin/teams	AdminTeamsView	Team oversight
/admin/plans	AdminPlansView	Plan management
/admin/files	AdminFilesView	File management

Layout

The admin panel uses AdminLayout.vue with tabs for each section:

┌─────────────────────────────────────────────┐
│  Dashboard │ Users │ Roles │ Groups │ Orgs │ Teams │ Plans │ Files  │
├─────────────────────────────────────────────┤
│  Content area                                │
└─────────────────────────────────────────────┘

API Endpoints

Method	Path	Description
GET	/api/admin/stats	Statistics (users, orgs, teams, roles, groups, files, storage)
GET	/api/admin/users	List all users (paginated)
GET	/api/admin/users/:id	User details with roles
POST	/api/admin/users	Create user
PATCH	/api/admin/users/:id	Update user
DELETE	/api/admin/users/:id	Delete user
POST	/api/admin/users/:id/roles	Assign role to user
DELETE	/api/admin/users/:id/roles/:roleId	Remove role from user
POST	/api/admin/users/:id/resend-verification	Resend email verification
POST	/api/admin/users/:id/send-password-reset	Send password reset email
GET	/api/admin/organizations	List all organizations (paginated)
DELETE	/api/admin/organizations/:id	Delete organization
GET	/api/admin/teams	List all teams (paginated)
DELETE	/api/admin/teams/:id	Delete team
GET	/api/admin/roles	List roles (?scope=)
GET	/api/admin/roles/:id	Role details
POST	/api/admin/roles	Create role
PATCH	/api/admin/roles/:id	Update role
DELETE	/api/admin/roles/:id	Delete role
GET	/api/admin/groups	List groups (?scope=&organizationId=)
POST	/api/admin/groups	Create group
PATCH	/api/admin/groups/:id	Update group
DELETE	/api/admin/groups/:id	Delete group
GET	/api/admin/groups/:id/members	Group members
POST	/api/admin/groups/:id/members	Add member to group
DELETE	/api/admin/groups/:id/members/:userId	Remove member from group
GET	/api/admin/groups/:id/roles	Group roles
POST	/api/admin/groups/:id/roles	Assign role to group
DELETE	/api/admin/groups/:id/roles/:roleId	Remove role from group
GET	/api/admin/plans	List all plans
PATCH	/api/admin/plans/:id	Update plan
GET	/api/admin/files	List files (paginated)
DELETE	/api/admin/files/:id	Delete file
GET	/api/admin/permissions	List all permissions

Key Implementation Details

• All admin endpoints require global:admin or equivalent permission
• 30+ granular permissions available for custom role creation
• User groups enable bulk permission management — adding/removing users from a group applies/removes all group permissions