This console reads across every tenant. Everywhere else in RoadIntel
the store is bound to one tenant and Postgres row-level security enforces
it; here it is not. Every read on this page is recorded in the audit trail
below as platform_read, against your name.
Tenants
Tenant
Name
Corridors
Sessions
Users
Admins
Actions
Managing
You are acting as yourself, not as this tenant — every change
below is recorded against your name with by: platform,
so the trail can tell "the client did this" from "Kologic did this
for them".
People
Email
Role
Corridors
Expires
Status
Sess.
Actions
Corridors
Id
Name
NH
State
Status
Length
Actions
Operations
Roles
Built-in roles cannot be edited or deleted — the same name meaning
different things in different tenants is the drift this design
avoids. Copy one to a new name instead.
Role
Grants
Members
Actions
Permissions
Audit
When
Event
Actor
Subject
Usage
API keys
Machine credentials for this tenant. A token is shown once when
minted and stored only as a hash — revoke and re-issue if one is
lost.
Label
Service
Scopes
Last used
Settings
Platform users
Every account on the deployment. Platform accounts and anyone
reaching more than one client are listed first — those are the ones
whose compromise costs the most.
platform_admin is not grantable from this screen; that
stays with scripts/bootstrap_admin.py, out of band.
User
Type
Tenant
Status
Last seen
Sess.
Actions
Corridors
Platform storage
Usage is read here directly. Everything else runs in
riit-storage-mgr, a one-off task that holds the
destructive verbs this API deliberately does not — so a job is
launched, not performed, and its result arrives on the row below.
The organized view over storage, read from the index: corridor and
date come from session_files, so they stay correct after
a reassignment and a drive is never filed under the wrong day. Open a
session to list its derived artefacts (frames, detections, …) from S3.
Audit
Newest first, across every tenant. platform_read rows are
this console reading; they are what replaces the isolation it bypasses.