# Platform admin

> Platform admins administer a whole NOVA Cloud deployment. Learn how platform admin differs from organization admin, and what the Platform page lets you manage, including organizations, users, feature availability, branding and the platform audit log.

> **Availability:** Platform administration is a special role configured during system setup for dedicated NOVA
> Cloud deployments. Existing platform admins can assign new platform admins.

A platform admin administers the deployment as a whole, across every organization in it. This is
separate from the regular **Admin** role, which is an organization admin and only applies inside
one organization.

## What a platform admin is

- A platform admin is responsible for the NOVA Cloud deployment as a whole. They can create and
  manage organizations and their users.
- Platform admins don't appear in an organization's user list or count toward its license seats,
  and can't be removed or demoted from there. Their role comes from the platform, not from the
  organization.

## The Platform page

Platform admins get a `Platform` page with three areas.

### Organizations

- **See every organization**, with its creator and number of members.
- **Create an organization** from a name. It starts empty.
- **Add or remove members.** Adding a member takes a role, and the dialog preselects Developer.
  Removing a member also removes their role and instance access in that organization. A user can
  be removed from their last organization, which leaves them in none.
- **Delete an organization.** Only an organization without members, instances, virtual instances
  or integrations can be deleted. Deleting it also removes its pending invitations, registration
  tokens and audit entries.
- **Turn features on or off** per organization in its `Settings` dialog. Fleet management,
  integrations and backups are off by default for new organizations, so this is where a hoster
  enables them for an organization that asks. Changes to these settings aren't audit-logged.

### Users

The `Users` tab lists every active user with their organizations. A platform admin can grant or
revoke platform admin for other users, but not for themselves, so at least one platform admin always
remains. Only users who have signed in at least once can be promoted.

The hoster sets up the first platform admin when deploying. After that, platform admins grant it
here.

### Branding

The deployment-wide logo is set here. It is shared by every organization in the deployment and is
useful for visually distinguishing deployments.

## Audit log

Actions a platform admin takes inside an organization appear in that organization's audit log
with a `Platform admin` badge.

Changes that belong to the deployment rather than to one organization appear only in the
platform's own audit log on the Platform page, never in an organization's log. These are creating
and deleting organizations, and granting or revoking platform admin.