mas-erp/platform-config.json and are never returned to browser responses. They are used only by the server-side provider Usage reader.mas-erp/platform-config.json file on your server/device. It is never written to the keyless JSON or sent back to the browser. Leave blank to keep the saved key.
Authentication now uses Supabase Auth, ERP operational data uses PostgreSQL/JSONB with Tenant isolation through RLS. Legacy test-company data is not used here.
How to use:
Choose a company in Modules & Engines to grant or deny individual engine access. This panel explains the control boundary; it does not duplicate the detailed entitlement editor.
Load a company to get its industry-specific KPI library. Edit the template weights, save an employee profile using their job title, enter actual achievement percentages, then create the annual appraisal. Enabled KPI weights must total 100.
What it is: a shortcut to the central Audit Log (source: erp_audit_log). It records Grant / Deny / expiry changes and every time a Super Admin enters a company.
What you do here: open the Audit Log, then use the filters (company, industry, type, dates) and Export Excel. Changing access itself is done in Modules & Engines.
Status: not built yet. There is no screen to create an Assistant Admin in this release.
Until it exists: give a trusted employee the Org Chart edit permission in the company's Permissions screen; that user can then change the company's departments (Org Chart > Departments) without being a Company Admin. Super Admin rights are never inherited.
Select a company below to enter it temporarily with full Company Admin privileges and manage its operational modules.