Platform Administration

(PLAT)

The central control plane for your entire Kubrik OS platform. Manage tenant provisioning, module enablement, feature flags, quotas, user roles, and system-wide audit logging. Designed for platform administrators who oversee the entire multi-tenant deployment.

Multi-Tenant Module Gating Feature Flags Quotas Audit Logs Role Management User Management System Config

Key Features

Everything you need to provision, configure, and govern your multi-tenant Kubrik OS platform.

Tenant Provisioning

Create and configure tenants with independent settings. Each tenant gets isolated data, user management, and module configuration.

Module Gating

Enable or disable any module per tenant. Granular control over which features each tenant can access — from basic to enterprise.

Feature Flags

Toggle features on or off per tenant without deployments. Roll out new capabilities gradually or A/B test functionality.

Quota Management

Configure resource limits per tenant — users, storage, API calls, and custom quotas. Monitor usage and enforce limits.

Audit Logging

System-wide audit trail capturing every change. View who did what, when, and from where. Immutable logs for compliance.

Role & User Management

Define roles with granular permissions. Manage users across tenants. Support username/password, MFA, SSO (OIDC/SAML), and API keys.

Kubrik OS — agent layer

Platform Administration, assisted and operated by AI

Platform is where the rules the agents obey are written. It governs the AI at least as much as the AI operates it.

AI-assisted

What the AI advises on

Available on every plan, Starter included.

Explains who can do what, and why a specific action was allowed or refused
Flags over-permissioned roles, dormant accounts and separation-of-duty conflicts
Reads the audit trail and reconstructs what an agent did, on whose behalf, and with what result

AI-operated

What the AI does under governance

Professional and Enterprise. Starter runs the AI in advisory mode only.

Provisions and de-provisions users and role assignments from an approved request
Adjusts feature flags and module gating per tenant, inside policy
Applies autonomy levels and value thresholds per role and per module

Governed tools an agent can call in this module

provisionUser() assignRole() setAutonomyLevel() toggleFeatureFlag() queryAuditTrail()

Autonomy is a setting, not a promise — choose the rung per role and per module

Suggest

The agent proposes. Nothing changes until a person acts on it.

Prepare

The agent builds the transaction and leaves it waiting for approval.

Execute below threshold

Acts on its own under a value or risk limit you set.

Execute by policy

Acts inside a written policy, every action fully audited.

Escalate

Anything outside the policy stops and goes to a person.

Same rules, either operator. An agent obeys the same permissions, validation and business rules a person does, and every action lands in the audit trail: who or what initiated it, the inputs, the rationale, the approvals, the resulting transaction and how to reverse it.