Admin console

The admin console is where access administrators manage who can use Stream Trace and what they can do. Access requires the relevant global permission for each section (for example users.manage for Users); instance_admin and access_admin cover all of management.

Users

List users, invite new ones, edit their global roles and team memberships, deactivate accounts, and revoke sessions to force re-authentication. Requires users.manage.

Teams

Create and update teams and manage their membership, assigning team-scoped roles to each member. Requires teams.manage.

Roles

Review the built-in roles and create custom roles by picking any combination of global or team permissions. Requires roles.manage.

Stream ownership

Map streams to the teams that own them, or override the ownership that was provisioned from configuration. Requires stream_ownership.manage.

Audit log

Browse the audit trail of every recorded action - publish, replay, export, DLQ retry/discard, admin changes, and authentication events - filterable by action, outcome, resource type, and time. Each entry records the actor, IP, timestamp, request ID, and outcome (succeeded, failed, partial, or skipped). Requires audit.read.

Settings

View the effective auth configuration - enabled methods, OIDC providers, signup mode - to confirm how the instance is set up. Requires system.settings.read.