Platform admin

Audience: Platform operators only
Goal: Manage multi-tenant SaaS configuration across customer organizations.

Platform administrators use a reduced navigation set when no tenant is selected: Agent Runtime, Tenants, Skills, and System Settings. Select a tenant in the header to perform tenant-scoped admin work.

Agent runtime

Under Agent Runtime (/agent-runtime):

Section	Path	Purpose
Edge runtime	/agent-runtime/edge-runtime	Platform-wide planner, interpreters, SQL limits, Explore UX
Agent profiles	/agent-runtime/profiles	Default agent profile catalog

Legacy paths such as /agents/edge-runtime redirect to /agent-runtime/edge-runtime.

See Edge runtime and Explore features for setting descriptions.

Tenant directory

1. Open Tenants (/tenants).
2. Create tenants with subscription plan codes.
3. Activate or deactivate organizations.
4. Use Configure to open Billing configuration (/billing/configuration) for plan, credits, and allowances.

System settings

Under System Settings (/system-settings):

Section	Purpose
Skills	Platform skill packages for planners
Planner	Global planner defaults
I18n	Internationalization configuration
Runtime	Platform runtime parameters
LLM pricing	Model cost tables
Subscriptions	Plan catalog (FREE, STARTER, GROWTH, BUSINESS, CUSTOM)

Security model

• Platform APIs use platformApiRequest without X-Tenant-Id.
• Local dev tokens are treated as platform admin; production uses Cognito groups (system_admin, system-admin, platform-admin, platform_admin, or platform:admin).
• Platform admins can operate on any active tenant (tenant-admin bypass) without being a tenant member; inactive tenants remain blocked.

Tips

• Use — No tenant — in the switcher for global configuration work.
• Document subscription changes in your customer CRM when adjusting plans.
• Coordinate Edge Agent upgrades with tenant admins before changing global runtime defaults.

Troubleshooting

Issue	What to try
Cannot create tenant	Verify system_admin or platform-admin role on token
Tenant admin sees platform nav	They may hold platform role—audit Cognito groups
Billing configure missing	Open from Tenants → Configure, not Billing submenu