Access Administration
Who can use the portal, what each person may do, and the record of every change.
Removing a role removes EVERY grant of that role for that person and takes effect on their next page load. Deactivating revokes every key and keeps the full audit history; it can be reversed with Reactivate. A person's Netlify sign-in is SEPARATE and is not removed here — with no roles it opens nothing. What anyone did with their access is on Transaction History; who was granted what, and when, is in each person's panel.
1Database tables
Applies any pending migrations to Neon, in order. Checking is read-only; nothing changes until you press Apply, and applying with nothing pending is safe.
2First administrator
Works only while no administrator exists, and only for the address set as
P2P_BOOTSTRAP_ADMIN_EMAIL. It then closes permanently.
3Administrator key (fallback)
Signing in is the preferred way and needs no key. This box exists for the day sessions do not work: paste a personal key to manage people with it instead.
TTesting set-up
Grants you — the signed-in administrator — Finance Viewer, Operator and Manager, so one account can test every stage. This combination defeats the four-eyes control: revoke the Operator and Manager grants from your own panel before go-live.
VVariance fields on the Expense form
Finance's option C (26 Aug 2026): when an invoice exceeds the requisition's
remaining balance, the requester explains it and the approver accepts it knowingly. Creates
approvedRemaining, varianceJustification, varianceAdvisory.
Uses your signed-in session. Safe to run twice.
RAccess report
Who used the portal, who was refused, and what this log cannot see.