MonSPHERE

Administration

Platform Administration

The cross-organization console: organizations, licenses, feature flags, and audit.

Platform Admin is a per-user flag (User.isPlatformAdmin), not an organization role — it exists specifically because operating the platform itself requires visibility across every organization, which no organization-scoped role should have.

What Platform Admins can do

  • List every organization and its member count
  • List every user across the platform
  • View a cross-organization audit log (last 200 entries)
  • Change any organization's subscription plan
  • Activate, renew, and revoke licenses
  • Read organization usage records
  • Manage feature flags and their per-organization overrides
  • Read/write global and per-tenant configuration

Feature flags

Feature rollout is real, not a config-file toggle: flags support global enable/disable, per-organization overrides, and a deterministic percentage rollout (a SHA-256 hash of organization ID + flag ID, mod 100 — so a given organization always evaluates the same way, not randomly per request).

curl https://api.monsphere.com/api/v1/organizations/:orgId/feature-flags-evaluate?key=kubernetes-monitoring \
  -H "X-Api-Key: msk_live_..."

Audit logs

Every configuration change writes an append-only audit_logs row — the table has a database-level trigger rejecting any UPDATE/DELETE, so "append-only" is a database guarantee, not just an application convention.