Skip to main content

Platform admin portal — screen specifications

Status: Proposed restricted operations UI. All privileged actions require server-side RBAC, audit and relevant step-up controls.

A01 — Operations overview​

KPIs: scheduled collections, attempts pending/unknown, partner outages, reconciliation breaks, payout batches pending, risk holds, failed merchant webhooks and critical notification failures. Filters: environment, provider, merchant, severity and age. Never aggregate sandbox and production as if equivalent.

A02 — Merchant review​

View legal entity, verification/KYB status, contracts, contacts, integration readiness and payout account verification. Actions: request information, approve/decline where authorised, suspend/restore with reason. Approval is not a substitute for regulated partner onboarding.

A03 — Payment investigation​

Search by merchant bill ID, internal attempt ID, provider reference or correlation ID. Timeline: bill versions, mandate checks, attempts, provider events, state transitions and notification outcomes. Actions: provider lookup, open case, request reconciliation; never blindly resubmit an UNKNOWN payment.

A04 — Reconciliation workbench​

Display expected ledger movements alongside partner statements and bank movements; show missing, duplicate, amount mismatch and delayed entries. Assign owner, attach evidence, propose adjustment and require approval. Never silently overwrite journal entries.

A05 — Payout control​

Review eligible funds, holds/reserves, payout batches, allocations, destination verification and provider status. Actions: hold/release under policy, investigate return, approve exceptional operations. Dual control for high-risk overrides.

A06 — Disputes and refunds​

View original bill/collection, refund/dispute lifecycle, merchant liability, reserves, partner deadlines and evidence. Actions: open case, request documents, submit approved provider action and reconcile resulting financial movements.

A07 — Support and audit​

Customer/merchant case queue with scoped PII, interaction history, complaint handling, access review and immutable audit events. Support agents cannot impersonate consumers or view full payment credentials.

A08 — System health​

Provider API availability, webhook ingestion lag, queue age, dead letters, reconciliation freshness, payout failures, notification delivery and security alerts. Actions: pause/resume selected operations under runbook, replay non-financial events safely, export incident evidence.

Security acceptance criteria​

  • Every screen enforces role and merchant scope on the server.
  • All high-risk actions record actor, reason, approvals and correlation ID.
  • No admin endpoint allows direct ledger-entry mutation.
  • Exported personal/financial data is permissioned and audited.
  • Production diagnostics do not leak secrets or full payment credentials.