Platform administration
The Cloud Control platform-admin console: manage every organization's plan, active/suspended status and feature flags. Invisible (404) to non-admins; suspension kills sessions.
Platform administration is for the operator of the whole deployment, not for tenant organizations. It lives on its own page at /admin and is invisible to anyone who is not a platform admin — the surface answers 404, never 403, so its existence is not revealed.
The platform owner account
The platform-admin account comes from PLATFORM_OWNER_EMAIL / PLATFORM_OWNER_PASSWORD, upserted on every boot — rotating the password is an env change and a redeploy. When those are unset, a default admin is seeded on every environment so /admin works out of the box (admin@snoweasl.com / SnoweaslAdmin!2026) — change it immediately, as it is a publicly-known credential.
What it manages
| Setting | Values | Effect |
|---|---|---|
| Plan | trial · pro · enterprise | The organization's plan tier. |
| Status | active · suspended | Suspending blocks login with 403 and kills existing sessions. |
| Feature flags | boolean per flag | Hide or show console surfaces (pipelines, Terraform, cost explorer, AI assistant, import). |
List every organization with `GET /api/admin/orgs` and update one with `PATCH /api/admin/orgs/{id}`. Every change is audited (admin.org_plan_changed, admin.org_status_changed, admin.org_features_changed).
The platform organization snoweasl-platform can never be suspended — the API rejects it with a 400. This prevents an admin from locking themselves out of administration.