Documentation

Administration

Admin Guide

How to add brokers with limited or full access, create personalised landing pages, and manage IP address tracking for task completion auditing.

User Roles & Access Levels

The platform uses a role-based access control system. Every user is assigned one of the following roles, which determines what they can see and do within the application.

RoleAccess LevelDescription
adminFull administrationCan manage all users, applications, landing pages, audit logs, and system settings. Has unrestricted access to every feature.
brokerBroker CRM accessCan manage their own clients, applications, magic links, reminders, and view their own landing page. Cannot access admin panel or other brokers' data.
applicantSelf-service onlyCan view and manage only their own application, documents, and tasks. Cannot access any broker or admin features.

Granting Admin Access

To promote a user to admin (total administration access):

  1. Navigate to Admin → Users in the top navigation bar.
  2. Find the user in the list (search by name or email).
  3. Click the role dropdown next to their name.
  4. Select admin from the dropdown.
  5. The change takes effect immediately — no restart required.

Alternatively, update the role directly in the database:

SQL — Promote to Admin
UPDATE users SET role = 'admin' WHERE email = '[email protected]';

Adding Brokers with Limited Access

  1. Have the broker log in to the platform via the Manus OAuth login page.
  2. Their account is automatically created with the default role of "user".
  3. Navigate to Admin → Users and change their role to broker.
  4. The broker will now see the Broker CRM dashboard with access to: Dashboard, New Application, Applications, Clients, Magic Links, Progress, and Reminders.
  5. They will not have access to: Admin panel, User management, Audit logs, Landing page management, or other brokers' data.

Broker Landing Pages

Each broker can have a personalised landing page accessible at a unique URL. These pages are publicly visible (no login required) and serve as the broker's branded entry point for new applicants.

Pre-Configured Landing Pages

BrokerEmailURL SlugBrand Colour
Red Prasad[email protected]/broker/red-prasad
Navy (#1e3a5f)
Dom[email protected]/broker/dom-outlook
Forest Green (#2d5a3d)
Atish Prasad[email protected]/broker/apply
Royal Purple (#4a2d6b)

Creating a New Landing Page

  1. Navigate to Admin → Landing Pages.
  2. Click Create Landing Page.
  3. Fill in required fields: Broker (select from dropdown) and URL Slug (e.g., john-smith).
  4. Optionally fill in: Display Name, Email, Phone, Company Name, Headline, Subheadline, Bio, and Brand Colour.
  5. Click Create.

Landing Page Features

Hero section with customisable headline and brand colour gradient
Call-to-action buttons linking to /apply?broker={slug}
Broker bio section with photo, name, company, and contact details
Services section (configurable via JSON in the database)
Testimonials section (configurable via JSON)
Trust indicators — "Why Choose Us" section
View counter tracking page visits
Application counter tracking originating applications

Managing Landing Pages

ActionHow
View pageClick the external link icon to open the public landing page in a new tab.
Edit pageClick the pencil icon to update display name, email, company name, and other fields.
Toggle active/inactiveClick the eye icon to enable or disable the page. Inactive pages return "Page Not Found".
Copy URLClick the copy icon next to the slug to copy the full URL to clipboard.
Delete pageClick the red trash icon. A confirmation dialog will appear.

IP Address Tracking

The platform tracks IP addresses for every task-related action to provide a complete audit trail. This is useful for compliance, security monitoring, and verifying that actions were performed from expected locations.

What Is Tracked

ActionIP FieldDescription
Task createdcreated_by_ipThe IP address of the user who created the task.
Task updatedlast_updated_by_ipThe IP address of the user who last modified the task.
Task completedcompleted_by_ipThe IP address of the user who marked the task as completed.

How IP Addresses Are Captured

  1. X-Forwarded-For header — Used when behind a reverse proxy. The first IP in the comma-separated list is used.
  2. req.ip — The Express.js request IP property.
  3. connection.remoteAddress — Raw TCP connection address as a fallback.

Querying IP Data

SQL — Query Task IP Data
SELECT 
  id, title, status, 
  created_by_ip, 
  last_updated_by_ip, 
  completed_by_ip, 
  completedAt 
FROM application_tasks 
WHERE completed_by_ip IS NOT NULL 
ORDER BY completedAt DESC;

Onboarding a New Broker

1

Broker Logs In

Direct the broker to the platform login page. They authenticate via Manus OAuth. Upon first login, an account is automatically created with the default 'user' role.

2

Set the Broker's Role

Log in as an admin. Go to Admin → Users. Find the new broker by name or email. Change their role to 'broker' for limited access or 'admin' for full administration.

3

Create a Landing Page

Go to Admin → Landing Pages. Click Create Landing Page. Select the broker, enter a URL slug, fill in display details, choose a brand colour, and click Create.

4

Share the Landing Page URL

The broker's landing page is now live at /broker/{slug}. Share this URL for marketing materials, email signatures, and social media.

5

Monitor Performance

From Admin → Landing Pages, monitor each page's view count (total visits) and application count (applications started from the page).

Security Considerations

!Role changes are immediate: new permissions take effect on the next page load or API call.
!Landing pages are public: anyone with the URL can view them. Do not place sensitive information on landing pages.
!IP tracking is passive: IP addresses are recorded automatically and cannot be disabled.
!Broker isolation: brokers with the 'broker' role can only see their own clients and applications.
!Admin access is unrestricted: grant admin access only to trusted individuals.