Team & Permissions
Sub-admin authorisation, module permissions, quota adjustment audit and site operation logs.
The Management & Audit tab lets you delegate work to colleagues while keeping a traceable record of what they do.
Sub-admins
If support, finance or marketing colleagues need console access, do not share your main account — create a sub-admin for each person and grant only what they need.
Only the reseller owner can manage the sub-admin roster. Even a sub-admin granted the Management & Audit module cannot add or remove other sub-admins.
Grantable modules
Sub-admin permissions are selected per module; a person sees only the tabs they were granted:
| Module | What it allows |
|---|---|
| Overview | Site branding, logo, homepage content, language and currency, custom domains |
| Users | Bind customers, adjust quota, set groups and visibility, reset passwords |
| Pricing | Configure groups and customer pricing |
| Redemption & Invite Codes | Issue and manage redemption codes, invite groups, waitlist |
| Finance | All money flows: reconciliation, receipts, consumption, procurement, commission and settlement |
| Analytics | Usage analytics: request and token summaries, trends, top models and customers, failure logs |
| Management & Audit | Quota adjustment audit and site operation logs (roster stays with the owner) |
Profit figures are visible only to those holding the Finance module.
Someone with Analytics alone sees usage and trends, but profit fields are zeroed out by the system — a deliberate separation of commercial data from operational data.
Suggested authorisation
Grant the minimum each role needs:
| Role | Suggested modules | Rationale |
|---|---|---|
| Support | Users + Analytics | Can look up customers, adjust quota and diagnose problems, without seeing your margin or costs |
| Finance | Finance + Management & Audit | Everything needed for reconciliation and audit, nothing customer-facing |
| Marketing | Overview + Redemption & Invite Codes + Analytics | Runs campaigns and content, never touches money |
| Technical | Overview | Domain and homepage configuration |
The Users module includes quota adjustment, which deducts directly from your wallet.
Before granting it to support staff, make three rules explicit:
- Clear-to-zero wipes the balance outright — do not confuse it with Add;
- Payment status defaults to "Not payment related" — if the customer paid, it must be set to Paid or Receivable, otherwise the credit is recorded as a complimentary grant;
- Every adjustment must have a remark;
- The amount is the credit face value promised to the customer, not the local currency collected.
Getting any one of these wrong costs real money or creates a complaint.
Sub-admin consumption is yours
API calls made by sub-admin accounts are charged to your wallet and recorded as internal consumption on the Finance tab.
Bear that in mind during testing and demos — avoid running large batches on expensive models.
Quota adjustment audit
Records every adjustment to customer quota:
- who made it;
- when;
- the amount and mode;
- the remark.
This is your primary evidence in a billing dispute. It is also why every adjustment needs a remark — nobody remembers six months later why $50 was added.
Site operation logs
Records configuration changes: branding edits, pricing changes, group visibility changes, domain operations and so on.
Start here when investigating "why did the site suddenly change".
Security practices
- Do not share accounts — shared accounts make the audit log meaningless and accountability impossible.
- Review the roster regularly — remove colleagues who left or changed roles.
- Least privilege, especially for the Finance module — grant it only to those who genuinely need it.
- Protect the owner account — it can do everything in the console; use a strong password and keep it separate.