User — Access ACX-01
Turn apps on or off for one person; see every path that grants access.
| Who can use it | users.list (read), entitlements.manage or app owner (write) |
|---|---|
| Where it is | /admin/users/:userId/access · link: https://hub.substratalapps.com/admin/users/:userId/access or substratal://admin/users/:userId/access |
| Available on | Web (PWA), iOS / iPadOS, Android, Windows, Linux (GNOME), macOS |
| Phase | MVP |
What you can do here
- Switch off — Optimistic with Undo (PATCH status:active) for 10 s
- Switch on — No confirm
- Remove grant made in error — Only developer grants with no order_id and < 24 h old; never on
free/subscriptionrows (409 entitlement_platform_managed); 409 otherwise
Related guides
- Managing users and their access — Find people, invite them, turn app access on and off, and understand why someone can or can't get in.
- Turn off someone's access and prove it worked — Pause one person's access to one app, check the result live, and find the record.
- Find out why someone can't get into an app — Work through account status, access paths, organization scope and roles, in that order.
On your platform
| App | Status | How it's built |
|---|---|---|
| Web (PWA) | — | tabpanel (route segment) |
| iOS / iPadOS | — | Segment content |
| Android | Planned | Tab content |
| Windows | — | SelectorBar item content |
| Linux (GNOME) | — | AdwViewStack page |
| macOS | — | Tab content inside detail |
Status is reported by each app's repository; — means that app doesn't report it yet.
For developers: API calls
| Method | Path | What it does |
|---|---|---|
| GET | /applications | List the catalog (filtered by visibility rules) |
| GET | /users/{id}/entitlements | A user's entitlements, personal and org-sourced |
| PATCH | /entitlements/{id} | The toggle: change status, term, source (trial→purchase), order_id, or an org grant's member scope |
| DELETE | /entitlements/{id} | Hard-remove a grant made in error (no order_id, under 24 hours old) |
Every call sends Substratal-Version: 1. Paths are at the host root, with no /v1.