Administrative Console
Administrative Console
10.1 User Management
Control access and team organization in Settings → Users & Permissions:
Add Users:
- Click Invite User
- Enter email address
- Select role (see 3.3)
- Optional: Set department/cost center
- Send invitation link
- User accepts and creates password
Manage Users:
- View all users, last login, activity
- Edit role or permissions
- Deactivate accounts (without deleting history)
- Reset password
- Export user list
Department Structure:
- Organize users by team or geography
- Delegate permissions by department
- Set cost center allocations
- Cross-department visibility controls
10.2 Role-Based Access Control (RBAC)
The platform includes three distinct role tiers plus custom role creation:
Platform Roles
| Role | Scope | Access |
|---|---|---|
| Super Admin | Entire platform | Consortium management, entity review, all admin data |
| Organization Admin | Own organization | All org data, team management, assessments, plans |
| Team Member | Assigned data | As permitted by role below |
Super Admin is reserved for platform operations staff (e.g., Center for Community Excellence, Inc. team). Super Admins can:
- Create and manage consortia
- Review and approve community entities
- Access platform-wide analytics
- Assign consortium administrators
Organization Admin is the highest role within a subscriber organization. Organization Admins can:
- Manage all assessments and reports for their organization
- Invite and manage team members
- Configure integrations and data sources
- Access billing and subscription settings
Organization-Level Roles
| Role | Create | Edit | View All | Admin |
|---|---|---|---|---|
| Admin | ✓ | ✓ | ✓ | ✓ |
| Editor | ✓ | ✓ | Personal | ✗ |
| Analyst | ☐ | ☐ | Read-only | ✗ |
| Viewer | ☐ | ☐ | Read-only | ✗ |
| Observer | ☐ | ☐ | Shared Only | ✗ |
Custom Roles:
- Go to Settings → Role Management
- Click Create Custom Role
- Select permissions:
- Create/edit/delete assessments
- View/export reports
- Manage team members
- Configure integrations
- Access billing
- Assign users to role
10.3 Audit Logs
View comprehensive activity history:
Access: Settings → Audit Logs
Audit Trail Includes:
- Who accessed what data/features
- When access occurred
- What changes were made
- Data before/after modification
- IP address and device info
Use Cases:
- Compliance reporting (GDPR, HIPAA)
- Troubleshooting data inconsistencies
- Detecting unauthorized access
- Accountability for data modifications
Export & Retention:
- Logs retained for 7 years
- Export to CSV for external auditors
- Real-time alerts for suspicious activity
10.4 System Configuration
Configure platform to match your organization:
Branding:
- Upload organization logo
- Choose color scheme
- Customize report templates
- Set email signature
Localization:
- Set default language (10+ supported)
- Configure date/number formats
- Set currency for financial features
- Time zone default
Data Settings:
- Maximum file upload size
- API rate limits
- Data retention periods
- Backup schedule
Integration Defaults:
- Preferred calendar system
- Default export format
- Webhook security settings
- API documentation visibility
10.5 Subscription Tiers & Billing
Four Subscription Tiers
| Tier | Cost | Who It’s For |
|---|---|---|
| Community | Free | Organizations beginning their sustainability journey |
| Basic | Monthly subscription | Growing organizations with regular assessment needs |
| Enterprise | Volume pricing | Large organizations and multi-department deployments |
| Custom | Negotiated | Organizations at scale (≥250 employees or ≥$10M revenue) |
Tier graduation: Tiers are calculated based on your organization’s ESGETC composite score and organizational scale. A 6-month grace period protects organizations whose score temporarily drops below their current tier threshold. Organizations that reach scale thresholds permanently graduate to Custom tier.
Baseline requirement: All tiers require completion of an initial baseline ESGETC assessment and at least one data source connection before full feature access is granted.
Subscription Overview
Access at Settings → Subscription & Billing:
- Current plan and cost
- Billing cycle and renewal date
- Invoice history
- Payment method on file
Usage Monitoring:
- Active users (vs. plan limit)
- Data storage used (vs. limit)
- API calls used (vs. monthly allowance)
- Collaborative workspace seats used
Upgrade/Downgrade:
- Change plan tier
- Add users/capacity
- Purchase add-ons (custom integrations, dedicated support)
- Effective date of changes
Billing Options:
- Annual (20% discount)
- Monthly
- Custom enterprise agreements
- Volume discounts available
Invoicing:
- Automatic email delivery
- Download PDF copies
- Export for accounting system
- Multiple payment methods accepted
Next: See Governance & Compliance for data security and ethical use