Letting platform support in
Your organisation's projects, data, members and settings belong to the organisation. The people who run AfriAnnotate (platform staff and superusers) manage the platform itself: its users, the list of organisations, quotas and platform settings. Running the platform is not a way into your organisation.
Without your say:
- your projects do not appear in their project list;
- opening a project, its tasks, annotations, exports, storage connections or webhooks is refused;
- your member list, policies, payouts, consent records and settings are refused;
- they cannot switch into your organisation.
Letting support in​
When you need help with something inside the organisation, an owner opens Organization → Settings → Access → Platform support, chooses how long (1 hour, 4 hours, 1 day, 3 days or 7 days), writes what it is for, and confirms.
For that time, platform superusers (and staff who hold the platform's Full data access grant) can switch into the organisation and work in it as an administrator would. It ends by itself when the time runs out.
- End now (owners and admins) ends it at once. Anyone from the platform who was switched into the organisation is taken out on their next request.
- A new one replaces the one in force: there is never more than one.
- The card lists the last ten times support was let in, by whom, for what, and whether it was ended early.
What is recorded​
| Event | When |
|---|---|
org.support_access_granted | An owner lets support in (with the length and the reason) |
org.support_access_ended | It is ended before it runs out |
The platform team gets a notice (platform.support_access) when you let
them in, with your reason. What they then open is recorded as before
when the platform's policy for staff data access is Audited (see
Security).
An organisation with no owner​
If an organisation is left with no active owner, nobody could let support in. Such an organisation is the platform's to look after until it has an owner again; this is the only case where the platform reaches an organisation without being let in.
API​
| Call | Who | Does |
|---|---|---|
GET /api/organizations/<id>/support-access | Owners, admins | State, the choices of length, the last ten |
POST /api/organizations/<id>/support-access with hours, reason | Owners | Lets support in |
DELETE /api/organizations/<id>/support-access | Owners, admins | Ends it now |
Platform staff calling GET learn only whether they are let in and
until when.