PowerMind FeatureHub User Guide - Administrative Access
Overview
FeatureHub provides an Administrator role for system operators to manage the platform, users, workspaces, quotas, and audit trails. This guide describes the roles, privileges, and available administrative actions.
Roles and Access Control
FeatureHub uses role-based controls to protect system operations:
- Standard User: Can create and manage resources (data sources, feature views, feature services, exports, integration keys) within workspaces they belong to. They cannot view other users, other workspaces, modify system settings, or view system audit logs.
- Administrator: A global role with system-wide privileges to manage all system objects, users, and settings.
Administrative Privileges
An account with the Administrator role can execute the following management operations:
1. User Management
- Status Control: Enable or disable any user account. Disabling a user prevents them from authenticating or executing requests.
- Role Control: Promote users to Administrators or demote existing Administrators.
- Quota Adjustments: Modify a user's persistent storage quota (limiting CSV uploads and feature export file sizes).
- Password Override: Reset any user's password to restore access (useful since there are no automated password recovery options).
2. Workspace Management
- Status Control: Activate or deactivate workspaces. Deactivating a workspace blocks all data access and schedules within it.
- Workspace Limits: Adjust the maximum number of data sources, feature views, or feature services allowed inside a workspace.
3. System Auditing and Settings
- Audit Trails: Inspect the platform audit log to trace administrative actions and system events.
- System Settings: View and modify global configuration parameters stored in the database.
- Observability: View overall system statistics such as disk storage usage, total workspace counts, and total registered users.
Administrative API Reference
Administrators can execute actions programmatically using the Python SDK or via REST endpoints prefixed with /api/v1/admin.
REST API Endpoints
| Method | Endpoint | Description |
|---|---|---|
GET |
/api/v1/admin/users |
List all registered users (paginated). |
PUT |
/api/v1/admin/users/{user_id}/status |
Enable/disable user accounts. |
PUT |
/api/v1/admin/users/{user_id}/role |
Promote or demote users to/from Administrator. |
PUT |
/api/v1/admin/users/{user_id}/quota |
Adjust a user's storage quota (in bytes). |
PUT |
/api/v1/admin/users/{user_id}/password |
Reset any user's password (must be ≥ 8 chars). |
GET |
/api/v1/admin/users/{user_id}/activity |
Fetch audit logs filtered by a specific user. |
GET |
/api/v1/admin/workspaces |
List all workspaces. |
PUT |
/api/v1/admin/workspaces/{workspace_id}/status |
Activate/deactivate a workspace. |
PUT |
/api/v1/admin/workspaces/{workspace_id}/metadata |
Edit workspace name and resource limits. |
GET |
/api/v1/admin/settings |
List all system settings. |
PUT |
/api/v1/admin/settings/{key} |
Update a system setting value. |
GET |
/api/v1/admin/audit-logs |
Retrieve the global system audit log. |
GET |
/api/v1/admin/stats |
Retrieve platform state size and object counters. |
SDK Methods
Administrators can also call these functions from the Python SDK:
- client.get_audit_logs() — Retrieve the system audit trail.
- client.admin_update_user_password(user_id, new_password) — Programmatically reset any user's password.