Admin Dashboard Guide
The admin dashboard at admin.curupira.api.br is the web UI for managing your organization — tenants, applications, users, roles, SSO, and logs. This page orients you to its sections; the task-specific guides (linked below) go deeper.
Signing in
Open admin.curupira.api.br and sign in with your admin account. What
you can see and do is governed by your admin permissions — controls for actions you lack permission
for are hidden, and the API returns 403. (Admin access is separate from the application RBAC that
governs your end-users — see Roles & Permissions.)
Navigation
| Section | What it's for | Guide |
|---|---|---|
| Dashboard | Home — at-a-glance stats and recent activity. | — |
| Tenants | Create and view tenants (organizations); each is created with its first application. | Tenant Onboarding |
| Applications | Create/list/edit applications: redirect URIs, settings, and API-key rotation. | Tenant Onboarding |
| Users | List and view users; assign or remove their roles and role groups. | Roles & Permissions |
| Roles | Create and manage application roles and their permission sets. | Roles & Permissions |
| Role Groups | Bundle roles into groups for bulk assignment. | Roles & Permissions |
| SSO | Configure per-tenant social/enterprise sign-in (Google, Microsoft, GitHub, …). | SSO Provider Setup |
| Logs | Audit trail and monitoring — login attempts, event logs, and audit logs. | — |
| Settings | Account and security settings, including your own MFA. | — |
Logs at a glance
The Logs section has three views:
- Login attempts — authentication successes and failures.
- Event logs — significant actions (token issuance, consent, super-admin access, etc.). Tenant
admins can see
super-admin accessentries here — when platform support accessed the tenant. - Audit logs — administrative changes, with before/after detail.
Common tasks
- Onboard a new organization → Tenant Onboarding
- Control what users can do → Roles & Permissions
- Enable social / enterprise login → SSO Provider Setup
- Honor a data-subject request → Data Subject Rights (GDPR)
Everything in the dashboard is also available on the Admin API for automation.