Appendix A. Role and entry quick reference
Full-length chapter. Content is checked against the 2026.10 mainline code and the live console; menus and features depend on the current license, account permissions, and delivered environment.
Back to overview · Full table of contents · Download full PDF
A.1 Visible entries for the five roles
| Role | Main entry | Common pages | Notes |
|---|---|---|---|
| Platform administrator | Top-left 「Platform administrator」 menu | Tenants, gateway nodes, Global settings (only the 「Account & session security」 tab; the platform side does not manage licenses) | Platform-level pages are open only to platform administrators; a tenant administrator who visits them is redirected and receives 403 |
| Tenant administrator | Admin Console /admin | Model providers, models, model groups, Traffic rules, Guardrail rules, MCP services, members and departments, Approval Center, Alert rules | The main entry for day-to-day configuration; most tasks are done at this layer |
| Security administrator | Admin Console (as granted by the role) | Guardrail rules (including threat intelligence), Operations overview › Rule hits, Operation audit | How this role splits work with the tenant administrator is decided by three-person segregation (Chapter 3) |
| Auditor | Admin Console (as granted by the role) | Operation audit, call records, Report export | Read-only by default; does not take part in configuration changes |
| Member | Workspace /settings | Model plaza, chat, My clients, API keys, personal usage | Sees only the model groups that were distributed, the models in those groups, and the capabilities that were granted |
A.2 Common page paths
| Page | Path |
|---|---|
| Operations overview | /admin/health |
| Request records | Operations overview › Requests |
| Model providers | /admin/model-providers |
| Models | /admin/models |
| Model groups | /admin/model-groups |
| Traffic rules | /admin/route-policies |
| Guardrail rules | /admin/guardrails/pii |
| Guardrail rules › 「Threat intelligence」 tab | /admin/guardrails/threat-intel |
| MCP services | /admin/apps |
| API services | /admin/http-proxy |
| A2A agents | /admin/a2a/agents |
| Members & Departments | /admin/accounts |
| Role Management | /admin/roles |
| Functional Groups | /admin/functional-groups |
| Operation audit | /admin/audit |
| Alert rules | /admin/alerts |
| Global settings › 「General」 tab | /admin/global-settings?tab=general |
| Global settings › 「Branding & appearance」 tab | /admin/global-settings?tab=branding |
| Global settings › 「Account & session security」 tab | /admin/global-settings?tab=security |
| Global settings › 「Data retention」 tab | /admin/global-settings?tab=data-retention |
| Global settings › 「License」 tab | /admin/global-settings?tab=license |
| Platform Status | /platform-status |
| Member workspace | /settings |
| Model plaza | /models |
Note: paths can be opened directly, but whether a page is visible depends on the role and the licensed modules. If you cannot see a page, check the role first instead of treating the feature as missing.
Previous: 27. Information needed when contacting support · Next: Appendix B. Common task index
27. Information needed when contacting support
Full-length chapter. Content is checked against the 2026.10 mainline code and the live console; menus and features depend on the current license, account permissions, and delivered environment.
Appendix B. Common task index
Full-length chapter. Content is checked against the 2026.10 mainline code and the live console; menus and features depend on the current license, account permissions, and delivered environment.