Account & operations
Admin console
Manage users, plans, abusive forms and platform settings.
The admin console lives at /admin and is only available to administrators.
Becoming an administrator
Set ADMIN_EMAILS (or ADMIN_USER_IDS) in the API environment. Matching accounts become administrators the next time they sign in. Administrators can then promote other users from the console.
Set ADMIN_REQUIRE_MFA=true to require two-factor authentication on the Clerk session for every admin request.
What admins can do
| Area | Actions |
|---|---|
| Overview | Users, Pro subscribers, forms, responses, storage, sign-ups and submissions per day |
| Users | Search, view usage and activity, give complimentary Pro (plan override), promote/demote admins, suspend/unsuspend, erase all data (GDPR) |
| Forms | Search all forms, open the public link, disable a form for abuse (with a reason) and re-enable it |
| Audit log | Every security-relevant action with actor, target and time |
| Settings | Edit Free/Pro limits live, publish an announcement banner shown in every dashboard |
| System | API version, uptime, database health, webhook queue, enabled security features |
What admins can’t do
Admins can’t read respondents’ answers or download their files. This is by design: support never needs that data, and it limits the impact of a compromised admin account.
Every admin action is written to the audit log.