Administration Panel

The CYPEX administration panel gives operators a single place to administer and manage CYPEX as a whole. v2.0.0 reorganizes it around how operators actually set up and run a multi-tenant deployment. This section is the navigation map for that information architecture: each entry below links to a topic-scoped page documenting the corresponding admin screen.

The table below is the authoritative list of sidebar labels and who sees each one. Labels are the strings the product renders — use them verbatim in procedures.

Visibility levels, new in v2.0.0 (v1.9.x had a single enterprise/non-enterprise flag):

Info

A System Administrator and an Organization Administrator see structurally different navigation — this is by design, not a rendering bug. If Authentication or Extensions are missing entirely, check the enterprise licence before debugging configuration. If the whole Platform Admin section is missing — including Storage & Repositories — check the account’s admin tier first: Platform Admin is System-Administrator-only regardless of licence. Once System Administrator access is confirmed, check the enterprise licence for Storage & Repositories specifically.

Tip

Menu items and page titles carry tooltips that name the underlying PostgreSQL concept — Schema Access explains that module and schema are the same thing, Organizations explains Row-Level Security, Roles & Capabilities explains PostgreSQL roles. Hover before reaching for the glossary.

The admin panel sections follow the production admin sidebar. Each link opens the topic page for the corresponding sidebar entry.

1. Setup guide — first-run walkthrough for a new CYPEX deployment.
2. Dashboard — the landing screen after login, including the in-product Setup Guide.
3. Builder
   • Database — the ER editor, queries, and workflows.
   • Applications — the applications list, create / edit / export / delete.
   • Repository Applications — install apps from a Git repo.
4. Access Control
   • Roles & Capabilities — roles map to PostgreSQL roles; every role now has a type.
   • Users — local users mapped to roles and organizations.
   • Capabilities vs Data Scope — how role capabilities and organization data scope combine.
   • Access Preview — simulate what a user can do and see.
   • Organizations — the multi-tenant data boundary. Organization Administrators reach it directly; System Administrators see it grouped under the Advanced (System admin) separator.
   • Schema Access — grant schemas (modules) to organizations. System Administrator only.
5. Authentication
   • SSO Providers — OIDC/OAuth2 federation (Google, Microsoft, or any generic OIDC IdP).
   • SSO (architecture) — coexistence with local auth, multi-provider-per-org, and the pending-approval model.
   • OIDC setup guide — hands-on: add a provider, sign in, approve a user, and the JWT claim / RLS trace.
   • LDAP — directory connection, role-mapping modes, and Active Directory notes.
   • Pending and rejected users — the SSO user state diagram, admin approve/reject/un-reject actions, and audit trail.
   • Login Settings — branding on the login page.
6. Integrations — the platform enforces allowlist → credentials → definition → enablement. Requires an active enterprise licence; without one the whole section is hidden.
   • Connector Execution — two-level enablement; ships disabled.
   • Allowlist — outbound hosts connectors may call.
   • Credentials — envelope-encrypted, organization-scoped secrets.
   • Connectors — author, validate, publish immutable versions.
   • Connectors (architecture) — the governed external API platform: security model, hardening history, permission audit cross-link.
   • Connectors setup guide — hands-on: rollout, allowlist, credentials, the guided builder, publish, execute, and audit.
7. Data & Content
   • REST API — every query, exposed as a PostgREST endpoint.
   • Internal API — system admin-only CYPEX backend API.
   • Files — uploaded binary content.
   • User Reports — PDF report rendering.
8. Monitor & Audit
   • User Audit Trail — login activity per user.
   • Table Audit History — change history per table.
   • Connector Audit — connector execution log, including policy blocks.
9. Platform Admin
   • Configuration — system admin platform settings.
   • Sessions and tokens — the access/refresh token model, session length, and the JWT environment variables.
   • Database Migrations — apply framework migrations.
   • Storage & Repositories — Git sources for extensions.
   • Internal Schema Browser — read-only cypex schema viewer.
10. Extensions — install SQL fragments from a repository.

• Setup guide — first-run walkthrough for new admins.
• Organizations setup guide — operational how-to for org / Schema Access.
• Upgrade to v2.0.0 — mandatory operator upgrade entry point.
• User management — how the CYPEX user concept interacts with admin roles.
• Terminology — the glossary that defines “Organization”, “Module”, and “Schema”.