Putri RahayuFajar Nugroho (you)Lina MarlinaRudi Hartanto

Active Invited

putri.rahayu@platform.testfajar.nugroho@platform.testlina.marlina@platform.testrudi.hartanto@platform.test

Operator

Name: Putri RahayuFajar NugrohoLina MarlinaRudi Hartanto
Email: putri.rahayu@platform.testfajar.nugroho@platform.testlina.marlina@platform.testrudi.hartanto@platform.test
Status: ActiveInvited
Invitation expires: 19 Oct 2026, 14:30 WIB19 Oct 2026, 15:20 WIB

Roles

Operator admin Protected
Operator

Operator runs companies and people. Operator admin manages Operators and the Platform's Roles.

Putri Rahayu's Roles savedOperator admin and Operator. It applies on their next action.

Invitation sent again to rudi.hartanto@platform.testIt now lasts until 19 Oct 2026, 15:20 WIB.

Invitation not sent againYou can't resend the Invitation yet. Wait a moment and try again.

A side panel over Operators; /platform/operators/{id} opens the list with it open. It needs membership.read at the Platform: without it, or for an id the answer doesn't hold (ended, or unknown), the 404 block in the content. It reads the row from GET /api/org-chart, the list's own answer: name, email, Roles, status, and an Invitation's expiry from expiresAt.
Change Roles needs membership.update. Its dialog lists the Platform's two Roles from GET /api/roles, and Save Roles sends PUT /api/memberships/{id}/roles {roleIds}, the whole set replacing the held one. Main checks 409 ORGANISATION_LAST_ROLE (an empty set, which the dialog keeps from happening by disabling Save Roles), 409 ORGANISATION_LAST_ADMIN (dropping Operator admin from the last active one), then 403 ORGANISATION_SELF_GRANT for Roles added to your own, unless you hold the protected Role at the root: an Operator admin may change their own. A change applies on the Operator's next request.
Remove needs membership.delete and asks first, with no reason. DELETE /api/memberships/{id} ends the Platform Membership, and every session of theirs is revoked at once. 409 ORGANISATION_LAST_ADMIN refuses removing the last active Operator admin, yourself included, and shows at the top of the dialog in main's words. An Operator admin may remove themselves while another is active; they are signed out and land on the sign-in page. Otherwise the panel closes onto the list, without the row, with a toast. No email is sent.
On an Invitation, Resend and Revoke stand in for Change Roles and Remove. Resend needs invitation.create: POST /api/invitations/{id}/resend sends it again and renews its 7 days (a new email gets a fresh link, a registered one the notice again). Within 60 seconds of the last send it answers 429 ORGANISATION_RESEND_TOO_SOON, shown as a danger toast in main's words. Progress shows on Resend only.
Revoke needs invitation.delete and asks first: DELETE /api/invitations/{id} answers 204, the link stops working and no email is sent; the list opens without the row, with a toast. One already accepted, revoked or removed answers 409 ORGANISATION_INVITATION_CLOSED, shown at the top of the dialog; an expired one may still be revoked.
Operator admin is the Platform's protected Role: it can't be deleted or lose its administrative Permissions, and the last active holder can't be removed, demoted or suspended (the last-Admin floor). Everything here is audited in the Platform's own log.

Applied from the rules: an Operator is a read-only side panel over Operators holding Change Roles and Remove, as a Member's panel does; each dialog's submit has its busy state; a result is a toast; a refusal shows at the top of its dialog in main's words.
Laid out as a Member's panel: the back arrow left, the name ("(you)" on yours) with its status chip and the email under it, the actions right, two titled cards side by side from 64rem. Remove is a danger outline button beside Change Roles, as Delete sits beside Edit on a Role.
Change Roles is a task dialog (a borderless close X, Cancel outline); Remove and Revoke are confirms (no X, Cancel ghost and disabled while they run), as the Role's Delete is.
Only Putri Rahayu's Change Roles draws Saving, No Role left and Saved; Save Roles in yours and Lina Marlina's closes back to the panel. Your own carries a warning alert, as a head office Admin's does on Members.
Remove has no reason field, as the mockup's footer settles. Removing yourself is drawn while Lina Marlina is another active Operator admin, so it saves, and lands on the sign-in page, since every session ends.
The last-Operator-admin refusal is drawn as it happens: removing Lina Marlina saves while you stay an Operator admin and lands on the list without her; then removing yourself would leave the Platform with none, so main refuses it at the top of the dialog.
Resend sits in the head as an outline button with the mail icon, one step with no dialog; the refused resend is drawn from Sent again, a minute not having passed. Sent again shows the renewed expiry in the card.
Operator admin carries the "Protected" neutral chip with the shield in the Roles card, as Admin does on a Role. The card's help is the mockup's line about the two Roles.
Drafted: "Loading the Operator…", "Change your Roles" with "You're changing your own Roles" / "As an Operator admin you can, and the audit log records it.", "Remove yourself?" with its two lines, the Revoke dialog's "The link in their email stops working, and no email is sent.", the Roles saved toast's "Operator admin and Operator. It applies on their next action.", the Sent again toast's "It now lasts until 19 Oct 2026, 15:20 WIB.", and "Invitation not sent again" over main's too-soon text.
Times are in the Platform's zone, Asia/Jakarta (WIB). Loading and a failed read show inside the panel, as a Member's do.

ticket #331 → comment: an Operator is a read-only side panel over the Operators list, with Change Roles and Remove in its head, as a company's Member is; the mockup's inline row buttons go. /platform/operators/{id} opens the list with the panel open.
ticket #331 → comment: Remove revokes every session at once, as the dialog says and spec #322 asks. Main's DELETE /memberships/{id} only ends the Membership, so the removed Operator's next request answers 403 ORGANISATION_MEMBERSHIP_ENDED with the session still standing.
ticket #331 → comment: an invited Operator has Resend (60-second cooldown) and Revoke, through #174's operations; the mockup drew Remove only. Resend's result and its too-soon refusal are toasts; Revoke asks first and lands on the list with a toast.
ticket #331 → comment: the last Operator admin's refusal is ORGANISATION_LAST_ADMIN's text at the top of the Remove dialog, not the mockup's "You're the last active Operator admin" banner on the list; the same floor refuses demoting them in Change Roles.
ticket #331 → comment: every dialog's submit shows a spinner on itself, and each result is a toast: "Putri Rahayu's Roles saved", the removed and revoked toasts on the list. The mockup's dialogs closed with no feedback.

The console opens on Companies; the Platform has no Home. Its nav is Companies, Find person and Operators, then Settings. (12 Oct 2026)
Settings › Organisation at the Platform holds Roles only: the Platform's team is the Operators page, and an Operator's Roles change on this panel. (12 Oct 2026)

From operator-console.html (Operators) for the copy; spec #322, its comment from #174 and ticket #331 for the behaviour; main's PUT /memberships/{id}/roles, DELETE /memberships/{id}, POST /invitations/{id}/resend, DELETE /invitations/{id} and the errorCode texts; the panel from settings-member.html

Page not found

Page not found

Page not found

Page not found

Change Putri Rahayu's RolesChange your RolesChange Lina Marlina's Roles

Remove Putri Rahayu?

Remove yourself?

Remove Lina Marlina?

Remove yourself?

Revoke Rudi Hartanto's invitation?