OWNER CONTROL ROOM
Platform at a glance
Manage customer workspaces, packages, billing, identity providers and verification from one place.
Workspace and account counts come from platform records. PayFast recurring run-rate uses saved price snapshots; it is a contract value, not accounting-recognized revenue. Incomplete price coverage stays blank. Individual failed payment attempts and churn history are not stored.
CUSTOMER ACCOUNTS
Recent workspaces
Loading workspaces…
PLATFORM SERVICES
Provider readiness
Checking configured providers…
Secrets are never returned to the browser. PayFast can use encrypted platform settings or Docker/server secrets.
SUBSCRIPTION HEALTH
Billing account status
Account totals are separate from workspace totals because one billing account can serve multiple workspaces.
Loading billing status totals…
Workspace and billing status summaries load from the platform aggregate.
RECENT CHANGES
Platform audit trail
Loading audit history…
PLATFORM PERFORMANCE
Analytics
Review account growth, verified subscription payment events, recorded AI allowance events and support response performance.
Dates are grouped by UTC event or creation time. Analytics include only data currently stored by OneCloud.
CUSTOMER SUPPORT
Support performance
Ticket cohort is based on the ticket's creation date.
DAILY SERIES
Activity by date
Daily account, payment, AI and ticket events. Payment amounts remain blank if any payment event is missing a valid amount.
| Date · UTC | New users | New organisations | New billing accounts | Payments | Payment amounts · ZAR | Cancellations | AI usage events | Tickets opened |
|---|---|---|---|---|---|---|---|---|
| Choose a date range to load platform activity. | ||||||||
Payment amount totals are event amounts from successful subscription callbacks. They are not reconciled or accounting-recognized revenue.
SOURCE COVERAGE
What these analytics can report
Unavailable measures stay explicit until the application records authoritative source data.
Coverage details load with the reporting period.
OPERATIONS & GOVERNANCE
System Operations
Live application and repository health from this server process. This page reports only telemetry currently available to OneCloud.
Waiting for the first health check.
RECOVERY VISIBILITY
Backup & Recovery
Recent encrypted backup job records and local artifacts from the configured backup volume.
Loading backup job history…
Before off-site copy, the job authenticates each complete AES-256-GCM stream and parses the PostgreSQL archive table of contents with pg_restore --list and the file archive listing with tar -tzf -. Decrypted bytes are streamed to these validators and are not written to disk. Optional strict mode requires the copy hook to return JSON with copied=true, sha256 and bytes matching the local encrypted file. This is a hook checksum attestation; OneCloud does not query the remote provider, does not restore the database or files, and does not report the external host scheduler.
TELEMETRY LIMITS
Additional operational sources
These sources are not currently connected to an owner-facing telemetry API.
Background jobs, email queue, errors and API latencyNo platform telemetry or queue monitoring endpoint is available yet.
UnavailableStorage consumption and independent backup verificationPhysical storage totals, remote-object verification and restore-test status are not connected.
UnavailableDeployment and migration historyThe running package and repository schema versions are shown above; deployment history is not tracked here.
PartialTENANT ADMINISTRATION
Workspaces and access
Assign OneCloud packages and included modules to customer organisations. These controls change access only; they do not collect payment.
Workspace access
Choose an organisation to review or change its package and status.
All workspaces
Loading…
| Workspace | Package | Status | Members | |
|---|---|---|---|---|
| Loading workspaces… | ||||
PLATFORM IDENTITY
Global Users
Search OneCloud accounts and review their organisation memberships. This is a read-only directory; account suspension, session revocation, MFA recovery and ownership transfer need a separate privileged-access design.
Platform user directory
Loading users…
| User | Organisation memberships | Account created | |
|---|---|---|---|
| Loading platform users… | |||
Page 1
Only names, email addresses, account creation dates and workspace membership details are shown. Password hashes, login credentials and provider tokens are not included.
CUSTOMER OPERATIONS
Support Centre
Search support tickets across OneCloud organisations and review customer conversations. This view is restricted to the Master Owner and does not change workspace tickets.
Platform ticket directory
Loading support tickets…
| Ticket | Organisation | Requester | Status | Priority | Updated | |
|---|---|---|---|---|---|---|
| Loading support tickets… | ||||||
Page 1
READ-ONLY TICKET REVIEW
Support ticket
Select a support ticket to review its details.
Master Portal support access is read-only. Cross-tenant replies, assignment, escalation, announcements and knowledge-base administration are not available here yet.
PRODUCT & COMMERCIAL RULES
Packages and add-ons
Set module access, usage limits, pricing and public catalogue visibility.
Package catalogue
Existing customers retain their assigned access until changed.
Loading packages…
Package definition
Published paid plans require a VAT-inclusive ZAR price.
Optional full-module add-on
One add-on provides the complete module entitlement.
SUBSCRIPTIONS & PAYMENTS
Billing operations
Search billing accounts, manage package status, price locks, add-on quantities and trial extensions.
Account controls
Changing price or add-on quantities can update a linked PayFast recurring amount. It does not collect an immediate payment.
Loading billing accounts…
OWNER CONTROL ROOM
Platform Settings
Configure OneCloud 360 platform identity, integrations and system preferences.
General Settings
OneCloud platform identity and regional defaults.
- Platform name
- OneCloud 360
- Default currency
- ZAR · South African Rand
- Time zone
- Africa/Johannesburg · UTC+2
- Language
- English
These defaults are currently managed by the application deployment.
Registration & Access
Control public signup while preserving invited team access.
Provider accessGoogle and Microsoft sign-in are configured in Authentication.
Owner approvalsPractice verification requests are reviewed in the owner portal.
Authentication Providers
Manage login methods and identity providers.
Loading provider settings…
System Features
Shared AI defaults and package features.
OneCloud AILoading shared provider…
Package featuresModule access is controlled by each subscription package.
Platform Information
Current brand and app connection.
Loading platform address…Platform accessMaster admin access confirmed.
Subscription Defaults
Review the current public package catalogue.
Loading packages…Package definitions are managed in Packages & add-ons.
OneCloud Brand
The owner portal uses the same official product logo, logo size, and brand palette as the customer workspace.
CUSTOMER WORKSPACE
MASTER PORTAL
Brand asset replacement is deployment-managed; the portal does not save custom logo files yet.
Domain & Callback URLs
Verify the address used by the active OneCloud deployment.
- Current portal origin
- Loading…
- Google callback
- Not configured
- Microsoft callback
- Not configured
Set the public HTTPS domain in deployment configuration. OAuth redirect URLs are shown here after the provider settings load.
Google sign-in
OAuth credentials apply to all OneCloud users.
Microsoft sign-in
OAuth credentials apply to all OneCloud users.
PayFast Platform Billing
Securely configure OneCloud subscription checkout.
Saved credentials are write-only and never sent back to this page.
Email & Notifications
Configured values are reported as set or missing; secrets are not exposed.
Loading integration status…
Transactional email and other provider credentials remain managed through Docker/server secrets. This view only shows readiness.
Public Subscription Packages
Active packages available for customer checkout.
Loading subscription packages…
Credential Protection
Platform secrets use authenticated encryption in the server database.
Checking encryption key…Platform credential access is restricted to the master admin.
Master accountLoading…
Change Accountability
High-impact platform changes leave an audit record.
Audit trailReview platform configuration and billing changes.
Feature Access
Control modules through package entitlements and add-ons.
Package feature flagsModule availability is assigned through the package catalogue and workspace subscription controls.
Independent platform-wide feature switches are not implemented yet.
Advanced Provider Defaults
Shared AI configuration for workspaces without their own provider.
PRACTICE ACCESS
Practice verification
Review submitted business registration details before allowing verified Practice packages.
Loading verification requests…
ACCOUNTABILITY
Platform audit trail
Review package, billing, verification, and platform settings changes.
| When | Action | Item | Admin | Changes |
|---|---|---|---|---|
| Loading audit history… | ||||