Platform Admin Agent

AI-powered admin agent for user management, org structure queries, and system administration.

MangoApps

Overview

AI assistant that helps administrators manage users, query org structure, diagnose system issues, and perform bulk operations via natural language conversation.

Platform

Highlights

Search and inspect user accounts by name, email, role, status, department, or location using natural language queries.

Audit user permissions and review role assignments across the organization with detailed permission breakdowns.

Monitor system health including active user counts, enabled apps, department and location statistics, and login activity.

Perform write operations such as activating or deactivating users, changing roles, sending invitations, and resetting passwords with confirmation safeguards.

Scan for stale invitations and privileged accounts needing access review with automated remediation bundles.

Query the audit log by user, action type, or date range to investigate recent administrative changes.

Capabilities

Conversational Admin

Natural-language queries against live org data
Multi-turn context within a session
Admin-only access enforcement (rejects non-admins)
Redirects how-to questions to the Help Agent
Per-business enable/disable toggle

User & Account Management

Search users by name, email, role, status, department, or location
View full user profile (role, department, last login, manager)
List all pending invitations
Activate or deactivate a user account (with confirmation)
Change user role: member, manager, or admin (with confirmation)
Send or resend an invitation email (with confirmation)
Trigger a password reset for a user (with confirmation)
Modify super admin accounts via the agent Use the admin panel directly

Org Structure & Roles

List all departments with active user counts
List all locations with active user counts
Role summary (how many users per role)
List all admin and super admin accounts
Aggregate stats: active, inactive, recent signups

Permissions & Audit

Check permissions for any user by ID or email
Search audit log by user, action, or date range
All write actions are logged to the audit trail
Full audit log export or bulk analytics Use the Reports app for bulk exports

Security & Remediation

Scan for stale invitations (configurable age threshold)
Scan for privileged accounts with no recent login
Remediation bundle with evidence and recommended actions
Execute remediation actions from bundle in-agent
List enabled marketplace apps for the business

App & System Visibility

System overview: active users, total users, enabled apps
List enabled marketplace apps with activation dates

Limits & Specs

Max users returned per search: 50 (default 20)
Max audit log entries per query: 100 (default 25)
Stale invite threshold (configurable): 7 days
Stale admin threshold (configurable): 90 days
Supported roles for role-change tool: member, manager, admin
Pricing: Included with MangoApps Workforce

Use cases

User account investigation

An admin asks "Show me details for jane@company.com" and receives the user's role, department, last sign-in date, manager, and invitation status in a single response.

Privileged access review

An admin asks the agent to scan for stale admin accounts and receives a prioritized list of administrators who have not signed in for over 90 days with recommended actions.

Failed invitation cleanup

An admin requests a scan of failed invitations and the agent surfaces users who were invited more than 7 days ago but never accepted, with options to resend or deactivate.

Department headcount check

An admin asks "How many active users are in Engineering?" and receives a breakdown of user counts by department with role distribution.

Bulk role audit

An admin asks "List all admin users" and receives a table of admin and super admin accounts with their last sign-in dates to verify that privileged access is appropriate.

FAQ

Only users with admin or super admin roles can interact with the agent. Non-admin users receive an access denied response. Super admin accounts can only be managed by other super admins.

The agent can activate or deactivate user accounts, change user roles (member, manager, admin), send or resend invitations, and trigger password resets. All write operations require confirmation and are logged to the audit trail.

The agent can build remediation bundles for failed invitations and privileged access reviews. Each bundle includes evidence (e.g., days since last sign-in), a risk assessment, and recommended next actions that can be executed through the agent.

Yes. Every query the agent executes is strictly scoped to the current business. The agent never exposes data from other businesses and never reveals sensitive information like passwords, tokens, or API keys.

Yes. Every write operation performed through the agent is logged to the audit trail with the action type, target user, and a note that it was performed via the Platform Admin AI Agent.