Add administrator

Creates the account with a temporary password and emails the sign-in credentials. Owner-only.

Admins

Workspace accounts

Sign-in accounts of one workspace. Each person has ONE sign-in across every workspace and the storefront, so a password, two-step or lockout change applies everywhere they sign in. Every action is confirmed first and written to the audit log.

RBAC Matrix

Plans

Tenant Billing

Stripe / Payments

Platform-level Stripe API keys used for checkout, subscriptions, and webhooks across all tenants.

Roots Studio 1080p upgrade — price

Feature live.studio.hd1080, granted per workspace under Tenants → Feature flags. The price is optional: while it is not set nothing is shown to workspaces except "Contact us to enable 1080p", and nothing is charged. Saving a price does not bill anyone.

Audit log integrity

Confirms nobody has changed or deleted entries in the audit log behind the scenes. The Audit Log page explains how this works and lists recent activity.

Recovery Codes

Loading remaining count…

Security Status

Informational — these reflect current platform configuration, not interactive controls.

Workspace sign-out policy

How long an inactive user stays signed in. Workspaces with no explicit value follow the Roots HQ standard. Changing this takes effect immediately and is recorded in the audit log.

IP allow / deny

SMTP alerts

Email alert events

Choose which events send an email notification. High-signal events are enabled by default; routine changes are logged but not emailed.

GeoIP — platform admin

These rules govern access to the platform admin surface only (this console). They do not affect any tenant's own site.

How this log protects you

Sign-ins, viewing money across workspaces, creating or deleting a workspace, support replies, maintenance runs and permission changes are all written here automatically. Nobody — including platform administrators — can edit or remove an entry from this page.

Each entry carries a fingerprint made from its own contents plus the fingerprint of the entry before it, like links in a chain. If anyone changed or deleted an entry directly in the database, every fingerprint after it would stop matching. Check integrity recomputes every fingerprint and tells you whether the chain is whole.

Recent activity

Traffic on this server's network interfaces, read from the kernel every 5 seconds (/proc/net/dev). Longer ranges come from 1-minute averages and peaks kept for 30 days. Refreshes by itself while this page is open.

How many Roots Studio broadcasts this VM can carry, what runs out first, and when growth gets there. Uses the same cost model the Studio relay admits broadcasts with (platform/capacityModel.ts) — prefilled from live readings and the costs measured on this host; edit anything and press Calculate. Nothing is saved unless an owner saves it.

Email alert settings

When a metric crosses its threshold, the recipients below are emailed (per-metric cooldown avoids repeats). Owner-only.

Live DNS / HTTPS reachability / TLS-certificate status for every tenant domain (all types). A background monitor also re-checks hourly and emails owners on SSL expiry or DNS misconfiguration.

Runs npm audit against the API workspace — reports KNOWN published advisories (GHSA/CVE) in the installed dependency tree. This is not zero-day detection and not source-level SAST. Apply safe fixes resolves the advisories with npm 12 in an isolated sandbox (a git worktree — never the live tree), verifies there (install, Prisma client, type-check of api/web/marketing/site, audit not worse, Prisma pin and xlsx pin intact), and only then copies the lockfile into the live tree, reinstalls and re-verifies, rolling back if anything breaks. A package whose peer dependencies conflict is skipped and named; the rest still apply. Never --force. Test in sandbox stops before the live step. A restart is required afterward to load updated deps.

Runs npm outdated — packages with a newer wanted (semver-compatible) or latest version available. Apply safe updates updates the semver-compatible packages through the same sandbox-first flow as the safe fixes above (npm 12, verified before anything live changes, one-at-a-time fallback when a peer conflict blocks the batch). Prisma is pinned and mobile-only dependencies are not installed here, so those are shown as held; major bumps are left for manual review.

Runs apt list --upgradable (read-only). Apply security updates installs only security-origin packages (unattended-upgrade); Apply all OS updates runs apt-get upgrade (never dist-upgrade — nothing is removed). Both run as a background job via sudo -n with live output, and can require a service restart or reboot. Owner-only; typed UPGRADE confirm.

Read-only optimization stats: database size, largest tables, dead-tuple / last-vacuum status, and unused indexes (bloat candidates).

Your Account

Your profile

Change Password

Passkeys

Recovery Codes

Loading…

To generate new codes, visit the Security section.

Tenant impersonation (support sessions)

Read-only by default; time-boxed; every access is audited.

Maintenance mode

General

Email relay (SMTP)

Inbound email (hello@roots-hq.com)

Address lookup (Geocodio)

DNS (control panel API)