app.platform_operators
TableRow level security on
The platform team (A90, Section 4.1 Platform Operator): one live row per person who may sign in to the operator console, with the role that sets what they may do there. Written only by the roster RPCs and private.grant_platform_operator; a row is revoked once and never edited or deleted. An operator reaches tenant data only through a support session the tenant Owner grants (1472).
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Operator grant id. |
| person_id | uuid | No | Person on the platform team.References app.people.id |
| operator_role | app.platform_operator_role | No | Support, Trust and Safety or Administrator. |
| reason | text | No | Why the person joined the platform team, in the granter's words. |
| granted_by | uuid | Yes | Administrator who granted the role; null when the platform named the first Administrator.References app.people.id |
| granted_at | timestamp with time zone | No | When the role was granted. |
| revoked_at | timestamp with time zone | Yes | When the role was revoked; the person can no longer sign in to the console. |
| revoked_by | uuid | Yes | Administrator who revoked it; null when the platform did.References app.people.id |
| revoke_reason | text | Yes | Why the role was revoked. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |