DTTASA | SA Control Centre

Overview

Live system state. All boards. All users.

—

Last SA Action

No recent actions

Critical Flags

No critical flags

User Registry

Suspend, block, force sign-out, change roles, reset credentials. Click any row to open the action drawer.

All

Active

Suspended

Blocked

Staff Member	Department	Power	Status	Joined	Last Seen	Action
Loading users…

—

Staff Profiles

View and edit all staff profile fields. Changes save directly to Firestore on blur or toggle.

Loading staff…

Select a staff member to view and edit their profile

Mission Records

All staff mission logs from the portal timer. Governance (SA) records are excluded. Live — updates as missions are completed.

Live Presence Board

Real-time shift visibility across all active staff. Updates automatically.

—

0

On Shift Now

0

Completed Today

0

Total Today

Portal Presence

Who is currently active on the portal — not just on shift. Updates every 30s.

0 Online

Verified Photos

Passport and website photos verified through the applicant portal.

Loading…

Digital IDs

SA bypass — upload directly to any user, skipping Comms & HR review entirely.

Loading…

Ops Leave

Pending leave requests submitted by the Head of Operations — SA approval required.

Leave Balances

Live leave entitlements calculated from policy rules. Annual leave, sick leave, and carry-forward per staff member.

Leave Records

Every leave entry across the organisation — both self-submitted by staff and entered on behalf — with who entered it, status, reviewer, and notes.

Hours Mgmt

Activate contracted hours tracking per staff member, or apply SA grace/penalty adjustments to hours owed.

Overtime Bank

Banked overtime hours awaiting review. Credit selected hours to reduce a staff member's hours owed.

Dept. Bulletins

Create targeted real-time alerts visible on staff dashboards — department-specific or broadcast to all.

Loading…

Board Overrides

SA-only overrides across every board. These bypass normal approval chains.

Leave Override

Force Approve Any Request

Approve a leave request bypassing queue and SLA

Manually Adjust Leave Balance

Override any user's leave hours with a reason note

Force Reject Any Request

Reject a pending leave request with a rejection reason

Load leave requests to apply overrides

Rota Override

Clear Rota (Date Range)

Remove all shift assignments within a date window

Bulk Publish / Unpublish Shifts

Toggle published state for a date range

HR Monitor Override

Force Close Probation Case

Close any probation review with an outcome

Override Bradford Factor Score

Manually set a user's BF score with a reason

Recruitment Override

Abort Open Pipeline

Force-close any active recruitment request

Reassign Recruiter Ownership

Transfer pipeline ownership to another HR member

Delete Applicant Record

Permanently remove an applicant from the system

Exec Board Override

Unlock Frozen Offboarding

Unfreeze a stuck offboarding record to allow continuation

Force Complete Iron Vault Workflow

Override a stuck vault workflow to completed state

IT Board Override

Force Close IT Ticket

Close any open IT request with a resolution note

Bulk Assign Tickets

Reassign multiple open tickets to an IT team member

EOM Override

Retract Nomination

Remove a specific EOM nomination from the current cycle

Clear All Nominations (Cycle)

Wipe all nominations for the current month

Set Winner Manually

Override and assign the EOM winner directly

Announcement Override

Unpublish Announcement

Remove from staff view without deleting

Delete Announcement

Permanently remove any announcement (no archive)

No announcements loaded

Grant Override

Override Grant Status

Manually set the workflow status of any grant application

Delete Grant Application

Permanently remove a grant application record

PIN Reset Requests

View Pending PIN Requests

See all staff awaiting PIN reset approval

Reject All Pending Requests

Bulk reject all outstanding PIN reset requests

Load PIN reset requests to manage them

SA Broadcast

Push System Notification

Send an urgent message visible to all staff on next login

Clear All Broadcasts

Delete all active system notifications for all staff

No broadcasts sent this session

Leave Year Controls

Preview Reset Impact

See which users would be affected and their current balances

Roll Over Leave Year

Reset all staff leave balances to policy defaults for the new year

Load preview before rolling over the leave year

Emergency Controls

These actions affect ALL non-SA users immediately. Use only in genuine emergencies.

Emergency Portal Lockdown

Force sign out ALL non-SA users from the portal immediately

Lift Lockdown

Clear all forceSignOut flags so staff can log back in

Lockdown status will appear here

Board Suspension Control

Suspend any portal board instantly. Suspended boards show a blank screen to all non-SA users. User data is never affected. SA accounts always retain access.

Suspension Reason (shown to users)

Individual User Suspension

Suspended users see a blocked screen on every page they visit. Suspension takes effect immediately and does not affect their data.

Suspend a User

Currently Suspended

Per-User Board Access

Restrict specific users from accessing individual boards without fully suspending their account. User data is unaffected and they can still access all other boards.

Set Board Access for User

Select boards to restrict (checked = blocked):

Currently Restricted

Data Management

Delete individual data categories per user, or perform a full account reset. Search a user first.

Select User

Data Categories

Full Account Reset

Deletes all data categories above for this user in one batch. Their Firebase Auth account is preserved — they can still sign in, but their Firestore record will be empty, as if newly registered. This cannot be undone.

Type the user's full name to confirm reset

Full Account Deletion

Deletes all Firestore data above and permanently deletes the Firebase Auth account. The user will be completely removed from the system. Any records they created will be reassigned or removed. This cannot be undone.

Type DELETE followed by the user's email address to confirm

No user selected

Search for a user above to view and manage their data.

Org Data

Bulk operations, archive tasks, token cleanup, and data re-seeding.

Token Cleanup

Purge Expired Reset Tokens

Expired, unused password reset tokens

Purge Used Tokens >24h

Used tokens older than 24 hours

Archive Operations

Archive Old Leave Requests

Resolved requests older than 1 year → leaveRequestsArchive

Archive Old Recruitment

Closed/rejected pipelines older than 90 days

Test Environment

Clear All Test Data

Bulk-delete every test_* shadow collection

Re-seed Defaults

Reseed Public Holidays

Re-populate Nigerian public holidays for current year

Reseed Leave Policy

Overwrite system/leavePolicy with organisation defaults

Reseed Org Config

Overwrite system/orgConfig with defaults

System Config

Live controls for system/config, system/orgConfig, system/roles, system/leavePolicy.

System Modes

Test Mode

All writes go to shadow test_* collections

Maintenance Mode

Non-SA users see maintenance screen on all pages

Force Handbook Re-acceptance

All users must re-accept handbook on next login

Applicant Portal Lab (HR Access)

Enables Portal Lab in HR sidebar — SA always has access

Maintenance Message

Employee ID Counter

Current next-to-assign ID. Change only to correct the counter after a manual import. The IT Board auto-increments this atomically.

Next ID: —

Set next ID number (integer):

Org Config (system/orgConfig)

Leave Policy (system/leavePolicy)

API Settings

Manage Comms platform API credentials. Changes affect the live comms board immediately.

API keys are stored securely in Firestore and only accessible to SA and Head of Communications. Restrict your YouTube API key to portal.dttasa.org in Google Cloud Console for added security.

YouTube

Subscriber count via YouTube Data API v3 (API key only — no login required)

YouTube Data API Key Channel Handle (without @) or Channel ID

Facebook

Page followers via Graph API v25.0 (same token covers Instagram)

Browser limitation: Ad blockers and privacy tools (Brave Shields, Firefox ETP, uBlock, etc.) block all requests to graph.facebook.com regardless of token type. Test in an incognito window with all extensions disabled. Stats can always be updated manually on the Comms Board.

Meta App ID ★ required for live stats

Client Token

Page Access Token (Long-Lived, fallback) Page ID (numeric)

Instagram

Followers via Facebook Graph API v25.0 (uses same Page Access Token)

Instagram Business Account ID

Find this in Facebook Business Manager → Instagram Accounts. Uses the Facebook Page Access Token above.

X (Twitter)

Manual entry — X API v2 requires a server-side proxy (Phase 3)

The X (Twitter) API v2 does not support browser-side requests due to CORS restrictions. Automated follower tracking will be added via a Cloud Function in Phase 3. Update counts manually from the Comms Board → Social Stats section.

TikTok

Connect the official DTTASA account via TikTok OAuth

Authorise the DTTASA TikTok account to enable follower & video metrics. You will be redirected to TikTok to approve access.

Internal Use Only: Link the DTTASA official account to sync follower metrics.

HR Document Library

Upload, manage and distribute HR documents to staff and applicant portals.

IT Escalations

Critical tickets, breached SLAs, open P1/P2 incidents, and active maintenance windows requiring SA attention. SA directives are visible to IT in the IT Board.

Loading…

Security Audit

Sign-in activity, failed attempts, force sign-out flags, suspension history.

Failed Login Alerts

No unusual login activity

Active Force Sign-out Flags

No active force sign-out flags

Currently Suspended

No suspended users

Currently Blocked

No blocked accounts

Recent Password Reset Activity

No recent activity

Recent PIN Change Activity

No recent activity

SA Audit Log

Append-only log of every action taken through this dashboard. Cannot be cleared.

Timestamp	Actor	Action	Target	Detail
Loading audit log…

Celebration

Manage seasonal decoration themes across all portal pages. Auto-detects from calendar — override manually when needed.

Current Status

Override Mode

Select celebration to apply, or disable all:

Upcoming Celebrations

Delete Completely

Permanent purge — removes every Firestore record, Cloud Storage artefact, and Firebase Auth account. Generates a Deletion Certificate archived under All Docs → Deletion Certificates. Cannot be undone.

Danger Zone — Final-step deletion

Step 1 — Search staff member

No user selected.

Step 2 — Type the staff member's full name to confirm

The Cloud Function verifies this matches the stored name.

Step 3 — Options Also wipe applicant trail — sweeps the original recruitmentApplicants record, applicantPortals, applicant photos/documents, offer letters, and the secondary Firebase Auth user. Joined via personalEmail. Untick only for a planned re-hire scenario where the original application is worth keeping. Fire Google Workspace deprovision (GAS) — automatically suspends the @dttasa.org account, revokes sessions, and scrubs the Google ecosystem after the portal purge succeeds. Untick to defer GAS for manual timing (e.g. you need the mailbox available briefly for handover).

Step 4 — Acknowledge I understand this will permanently delete every Firestore document, Cloud Storage artefact, and the Firebase Auth account belonging to the selected user. The combined Deletion Certificate will be archived in All Docs → Deletion Certificates. This action cannot be reversed and bypasses the HR offboarding workflow entirely.

Select a user + type the confirmation name to enable.

Deleted Users Registry

Every staff member offboarded and every applicant purged via SA Control. Drives the recruitment-pipeline re-hire scanner — when HR adds an applicant, this registry is searched first and any prior deletion surfaces as a warning.

—

Total Entries

—

Staff Deletions

—

Applicant Deletions

—

Last 30 days

Subject	Type	Work email	Personal email	Applicant ID	Deleted	Reason	Actions
Loading…

Deputy Leads

Level 3 cross-org tier — 2IC access within their home department. SA can promote any user from any dept; the Head of a dept can promote one of their own. Every promotion / revocation is audit-logged with actorRoleTier.

—

Active Deputies

—

Departments Covered

Active Deputy Leads (read-only view, all departments)

Name	Email	Department	Promoted	Promoted by	Actions
Loading…

Promote a User to Deputy Lead

Search staff member

No user selected.

Reason (optional, recorded in audit)

Select a user above to enable.

Idealist Postings

Audit feed of every Idealist post recorded by HR. Each entry fires a fan-out to the SG, Support, all HR users, and the designated Volunteer Management & Engagement Manager.

Designated Volunteer Management & Engagement Manager

Promotes the picked user to full VMEM (sets users/{uid}.vmemFlag = true + updates system/orgConfig.vmeManagerUid). They immediately gain access to the Volunteer Management dashboard, the Welfare Inbox, intake activation, away-mode, and personal Idealist posting notifications. Only one VMEM at a time — promoting a new pick auto-demotes the previous.

Loading current designation…

Recorded Postings

Loading…

Board Access Control

Vice-President only. Choose a Super-Admin, then toggle which boards they can open. Revoking a board hides it from their menu and blocks the page on entry. Default is full access — toggle a board off to revoke it. You (the VP) always retain full access and are the only person who can change this matrix.

Super-Admin

Select a Super-Admin above to manage their board access.