Substratal Apps Substratal Apps Hub specs
GitHub

Help Tutorials

Administrators About 20 minutes

Your first hour as an administrator

You'll need: an account with the superadmin role.

1. Turn on two-factor authentication (5 min)

Account → Security → Turn on two-factor. Scan the code, confirm, and store the recovery codes in your password manager. Do this before anything else, because your account can change everyone else's.

If your device offers an app lock (Face ID, Touch ID, Windows Hello), turn it on in Settings so the Hub locks when you leave it.

2. Find your way around Manage (2 min)

On a phone, tap Manage. On a tablet or desktop, look at the sidebar. Administration holds Users, Access, Roles, Audit Log and Send notification. Developer holds Applications, API Keys, Webhooks and Tenant.

3. Make a read-only support role (5 min)

  1. Roles → New role.
  2. Name it support_readonly.
  3. Tick users.list and audit.view. Nothing else.
  4. Save.

4. Give it to someone (3 min)

Users → search for them → Roles → Assign → support_readonly. From their next request, they can look up people and read the audit log, but can't change anything.

5. See your work in the audit log (2 min)

Audit Log now shows role.created and role.assigned, with you as the actor. Tap one to see before and after.

Next: Turn off someone's access and prove it worked.

Screens in this tutorial

ACC-05 · Turn on two-factor GLB-02 · Manage hub USR-01 · Users ROL-03 · New role ROL-04 · User — Roles AUD-01 · Audit log

Last updated 2026-10-23 · Built 2026-10-25 from a9ef3be · API 1.0.0-draft.13 · Substratal-Version: 1