CEDX Admin · Platform
Admin is the console behind the org: 2,485 licensed seats against 1,677 assigned, 396 sitting idle, and $14K a month of waste broken down by idle, over-tier and ghost — per pack, with reclaim evidence one click away.
The sharpest alert on the Overview is structural, not technical: an org-owner still signing in with a password only. The console notices, because that is what it is for.
Runs on demo data. Northline Production in the captures is the software's demo workspace, not a customer.
What it is
The Seats screen is a waste radar: 396 idle seats, $14K a month in waste, and the packs ranked by a waste score — the platform suite leads at 82 with 14 idle, 6 over-tier and 3 ghost seats at $1.1K a month. Even the AI packs are counted: $718 of waste across 91 AI seats.
The role table separates system from tenant-defined: 36 templates, 21 custom, each with permission count, member count and a sensitivity label. The two orphan roles — zero members, one of them a legacy admin with 40 permissions marked Critical — are exactly what a role audit goes looking for.
The Users table joins the two facts admins usually chase across two tools: what seat someone holds and whether MFA is on. 130 privileged accounts at 87% MFA coverage means 17 are not covered — and the idle-30d card counts 255 accounts with 19 of those without MFA either.
Product tour
Not a mockup and not a concept deck. This is what opens at /app/admin.
01 — Overview
Seat utilisation reads 67%, and the alert list says what to do about it: 14 idle Enterprise seats older than 45 days at $1.1K a month and rising; a service account holding Enterprise write with no traffic in 90 days; a partner sandbox at 18 of 25 seats with invites still open.
02 — Users
320 identities with department, status, role, seat, MFA and last active on the row. The gap between 87% MFA on privileged accounts and 100% is not a report request — it is a filter away.
03 — Seats
2,485 licensed, 1,677 assigned, and the waste radar beneath priced pack by pack — viewer pool with 28 idle, project packs with 16 idle and 5 ghost. Waste $ is a column, not a quarterly estimate.
04 — Roles
Thirty-six roles with permission and member counts, sensitivity from Low to Critical. Orphan roles — the ones nobody holds — are counted on the header, because a Critical role with zero members is still a key under the mat.
Who runs it
Roles, not references. We have no named customers yet, so nobody in these photographs is quoted, credited or claimed as one.
Owns the seat ledger. The 396 idle seats and the reclaim simulator are their monthly number, argued from the same table finance sees.
idle seats · 396
Owns the drift board: 27 high-drift principals, the org-owner on password-only sign-in, and the service accounts holding write access with no traffic.
high drift · 27
Own the 24 workspaces and the seat caps — 4 of them near the limit with invites still open, which the Overview flags before the invite fails.
workspaces · 24The shape of it
Every figure below is legible in the captures above. Nothing here is a projection of your estate — it is the state of the demo data, dollars included.
How it runs
A seat is granted with a role and a workspace — one of the 1,677 assigned, with the pack and tier recorded from day one.
Utilisation and drift are computed continuously: 67% seat util, 27 high-drift principals, MFA coverage on the privileged set.
Anomalies arrive root-caused — idle Enterprise seats at 45+ days, an org-owner without MFA, a sandbox near its cap.
The reclaim simulator turns the waste radar into an action list, pack by pack, before the next true-up.
One record
Admin is where the org itself is configured — the seats, roles and workspaces the rest of the estate bills against and enforces.
Admin counts 130 privileged accounts; Identity is where their sign-in factors and policies actually live.
CEDX DirectoryThe 320 identities on Admin's user table are the records Directory keeps sourced and current — idle seats often start as orphaned accounts.
CEDX EntitlementsSeat tiers and packs map to the feature flags and plans Entitlements serves — the $14K waste question is a plan question too.
CEDX AuditRole changes, seat grants and workspace edits are admin-class events — 124 of them in the demo audit stream.
Limits
Finding this out on the third call is worse for you than reading it here, and worse for us.
Start
Open it right now
Your seats, your roles
Admin with the rest of it
Questions
Yes. Every screenshot is a capture of the running build and you can open the same build at /app/admin. It runs on demo data, which the page says next to the figures rather than in a footnote.
Three buckets, visible on the Seats screen: idle (no activity), over-tier (a bigger seat than the role needs) and ghost (invites never accepted). Each pack shows all three counts with a dollar figure and a waste score — the scoring model is a tab on the same screen.
The distance between what a principal can do and what their role says they should. The Overview leaderboards it — service accounts with elevated write and no traffic score highest, 95 and 84 in the demo data — so the fix is scoped to a role, not a suspicion.
Yes — 21 of the 36 roles in the demo tenant are custom, and New role is a button on the table. Every role carries a permission count, member count and sensitivity label so a custom Critical role is visible as such.
Admin is the org console for the CEDX estate — seats, roles, workspaces. Identity is where sign-in policy and MFA live. How the two map onto your existing stack is the estate map conversation.
No certification has been issued. What we can evidence about hosting, encryption, tenant isolation and production access is written up on the security page.
Live build, demo data, no card. Then count the idle Enterprise seats in your own org — if you can.