Operator Deck
Operator Authentication

Sign in before touching approvals or spend.

The dashboard now uses a signed operator session instead of assuming every request is an admin. Role-aware actions still flow through the backend capability checks after login.

Sign In

Use a configured operator account. For local compose runs, demo accounts are enabled by default.

Local Demo Accounts

Replace these with `OPERATOR_CREDENTIALS_JSON` and `AUTH_SESSION_SECRET` in real deployments.

admin

Local Admin

ADMIN
Password: admin-demo-pass
operator

Queue Operator

OPERATOR
Password: operator-demo-pass
analyst

Pipeline Analyst

ANALYST
Password: analyst-demo-pass
viewer

Read-Only Viewer

VIEWER
Password: viewer-demo-pass