Back to Knowledge Base

Managing Companies on the Platform

Updated September 24, 2026

Managing Companies on the Platform

As a Super Admin, you have access to platform-level controls for managing all companies on Atlock, including account verification, billing configuration, and system-wide settings.

Super Admin vs. Company Admin

Attlock dashboard showing the main operations workspace and navigation.
Dashboard: use the left navigation to open the required workflow.
CapabilityCompany AdminSuper Admin-------------------------------------Manage own companyYesYes (all companies)View other companiesNoYesManage billing/subscriptionsOwn onlyAllAPI key managementOwn onlyPlatform-wideAudit logOwn companyAll companiesPlatform settingsNoYesData migrationOwn dataCross-company

Viewing All Companies

  1. As a Super Admin, you can access the company management section.
  2. View a list of all registered companies with:
    • Company name and logo.
    • Subscription tier.
    • Number of guards.
    • Number of sites.
    • Account status (Active, Suspended, Trial).
    • Registration date.

Verifying New Companies

When a new company registers:

  1. Review their submitted information.
  2. Verify business details (company name, address, industry).
  3. Approve or reject the application.
  4. Approved companies gain full platform access.

Configuring Billing and Subscriptions

  1. Go to the billing section.
  2. For each company, manage:
    • Subscription Tier — Free, Starter, Professional, Enterprise.
    • Feature Access — Enable/disable specific features:
      • `command_center`
      • `vehicle_manager`
      • `training_module`
      • `white_label`
    • Billing Cycle — Monthly or Annual.
    • Payment Status — Active, Past Due, Cancelled.
  3. Stripe integration handles payment processing automatically.

Managing API Keys

  1. Navigate to Settings > API Keys.
  2. View and manage API keys for platform integrations.
  3. Create new keys with specific scopes:
    • Read-only access.
    • Write access.
    • Admin access.
  4. Rotate or revoke compromised keys.
  5. Set expiration dates for temporary access.

Setting Up Webhooks

  1. Go to Settings > Webhooks.
  2. Configure webhook endpoints to receive event notifications:
    • URL — Your receiving endpoint.
    • Events — Select which events trigger the webhook.
    • Secret — Signing secret for verifying authenticity.
  3. Available events include:
    • Incident created/updated.
    • Guard clocked in/out.
    • Geofence breach.
    • Shift created/cancelled.
    • Panic alert triggered.
  4. Test webhooks with the Send Test button.
  5. Retry failed deliveries from the webhook log.

Viewing the Audit Log

  1. Navigate to Settings > Audit Log.
  2. The audit log records all significant actions:
    • User actions (login, data changes, role changes).
    • System events (API calls, webhook deliveries).
    • Security events (failed logins, permission denials).
  3. Filter by:
    • Date range.
    • User.
    • Action type.
    • Resource.
  4. Export the audit log for compliance reporting.

Running Data Migrations

  1. Go to Settings > Data Migration.
  2. The data migration wizard supports:
    • Template Generator — Download CSV templates for bulk data import.
    • Platform Presets — Pre-configured mappings for migrating from other platforms.
    • Validation Engine — Validates data before import.
    • Cleaning Engine — Normalizes data (name formats, phone numbers, etc.).
  3. Import process:
    • Upload CSV file.
    • Map columns to Atlock fields.
    • Review validation results.
    • Fix errors.
    • Execute import.

API Documentation

  1. Go to Settings > API Docs.
  2. Browse the API reference:
    • Endpoint descriptions.
    • Request/response examples.
    • Authentication requirements.
    • Rate limits.

Platform Health Monitoring

As Super Admin, monitor:

  • Active user count.
  • API request volume.
  • Error rates.
  • Storage usage.
  • System status.

Tips & Best Practices

  • Verify companies promptly — Delays in verification frustrate new customers.
  • Rotate API keys periodically — Even if not compromised, regular rotation is best practice.
  • Monitor the audit log weekly — Look for unusual patterns or unauthorized access attempts.
  • Test webhooks after configuration — Ensure your endpoints are receiving events correctly.
  • Back up before data migrations — Always verify data in a dry run before executing.

Troubleshooting

Company can't access a feature

  • Check their subscription tier and feature gates.
  • Verify the feature is enabled for their plan.
  • Check for billing issues (past due payments may restrict access).

Webhook not firing

  • Verify the endpoint URL is correct and accessible.
  • Check the webhook log for delivery errors.
  • Ensure the event type is selected in webhook configuration.

Data migration errors

  • Review the validation report for specific errors.
  • Common issues: duplicate emails, missing required fields, date format mismatches.

Related Articles

  • Understanding Roles and Permissions
  • Configuring Company Settings
  • Viewing the Audit Log
  • Using the Analytics Dashboard

Was this article helpful? Contact Support