Sign in to Cloud operations.
Operator access
Verify your email, then enter a code from your authenticator. Your operator session is held securely by the Cloud service.
Open your authenticator app and add an account by scanning this QR code. Then enter its current six-digit code above.
Enter a setup key manually
Add a time-based account named Cloud operations with this key.
Advanced access token
Exchange a short-lived MFA access token from the configured identity provider for a secure Cloud session.
Verified identity details
Overview
Check your managed schools, review recovery evidence, and run authorized operations from one place.
Needs attention
This summary uses the latest available observations. Alert delivery and service history are not configured.
Schools
Open a school for its latest process observation and saved release. Environment describes hosting; purpose describes how the installation is used.
Student/user counts, database size, contact, error history and school recovery evidence require connected school contracts and are not available here yet.
Platform health & recovery
Backup coverage here is the Cloud operator service and its identities. School data and media have separate recovery coverage.
What is needed for a restore test?
The recovery owner must decrypt a chosen off-host backup into an isolated test environment and verify the restored identities, permissions and jobs. School databases and media need their own restore evidence. This console cannot decrypt or run that test yet.
Releases
Compare the release saved in each school's configuration with its observed running source. These are separate facts; a saved version is not proof of deployment.
Upgrade previews are available below each school. Promotion and deployment are not enabled in this console.
Jobs
Latest 200 visible jobs, newest first. These operations read or plan; they do not deploy. Active jobs refresh automatically while this page is visible.
User access
Find an active school user and inspect their current memberships. School sign-in and changes to school permissions are not available here yet. Inspection sessions expire within 30 minutes.
School support enrollment
Sessions for this school from the latest 200 visible sessions. Only the creating operator can inspect a session.
Current user access
Technical access receipt
Saved permissions
Super admins manage standing authority. Grants expire within 90 days. The final active Super admin cannot be revoked.
Automation credentials
Create a scoped credential for a tool or worker. Its saved permission appears above and can be revoked immediately. Permission management still requires your MFA sign-in.
This credential is shown once. Save it in your tool's secret store; do not paste it into chat or a repository.
Audit log
Filter or export the latest 200 authorized events. Older events are not included in this view or export.