CEDX 2026 Kernel Release: Single-tenant isolation, canonical Postgres schema, workflow bus, and immutable audit trail Explore the CEDX Admin architecture ->
CEDXSystems
EnglishTalk to sales
PLATFORM & IDENTITY CEDX Admin
Overview Users Seats Workflow & Tour Operators TCO Model 14-Day Sandbox Live build ↗
PLATFORM & IDENTITY CEDX Admin · Platform · admin.cedxsystems.com

Seats, roles, drift: accounted for, in dollars.

Admin is the console behind the org: 2,485 licensed seats against 1,677 assigned, 396 sitting idle, and $14K a month of waste broken down by idle, over-tier and ghost, per pack, with reclaim evidence one click away.

Open live CEDX Admin -> Inspect 4-screen build tour
2,485 licensed seats $14K seat waste per month 36 role templates Zero-ETL Shared Postgres Record
CEDX Admin Enterprise Architecture Briefing
CEDX Admin · 2,485 licensed seats

"When Sales, Operations, and Finance read and write the exact same Postgres record, month-end stops being a detective i..."

Elena Rostova · Chief Financial Officer · Northline Group · 0.01s Canonical Sync
CEDX Admin reads and writes the exact same canonical Postgres record as CEDX Identity, CEDX Directory, and CEDX Entitlements with zero third-party webhooks.
🔒 https://admin.cedxsystems.com/workspace/live
CEDX Admin · Overview (Estate health with the alerts root-caused)
admin.cedxsystems.com · 01 Overview · Live Canonical Dataset
● Overview Active · 0.011s Sync Open /app/admin ↗
LICENSED SEATS
2,485
1,677 assigned · 67% util
SEAT WASTE PER MONTH
$14K
idle + over-tier + ghost
ROLE TEMPLATES
36
13 privileged · 2 orphan
MFA ON PRIVILEGED ACCOUNTS
87%
130 accounts in scope
Platform Subsystem / Node Canonical Schema Binding Tenant & RBAC Scope Throughput / Event Rate Cryptographic Audit SLA Availability
Canonical Entity Graph v26.4CEDX Admin · Record #1040 132 Apps · Shared Primary Keys Global Multi-Entity Root 48.2M Events / Day ● SHA-256 Chain Verified 99.995% Uptime
Workflow Deterministic BusCEDX Admin · Record #1041 Cross-App Triggers (CRM->Books) Zero-Middleware Execution 1,840 Workflows / Min ● Idempotent Replay Log 0.012s p99
Enterprise Directory & RBACCEDX Admin · Record #1042 418 Principals · 38 Roles SCIM + SAML + Passkeys Zero Standing Drift ● Every Grant Priced 100% Enforced
Immutable Compliance LedgerCEDX Admin · Record #1043 SOC-2 / ISO / GDPR Evidence Tamper-Evident Storage 100% Write Coverage ● Auditor Read-Only View Verified Live
✦ CEDX Admin Copilot · Canonical Entity Graph v26.4
Overview Verified
Seat utilisation reads 67%, and the alert list says what to do about it: 14 idle Enterprise seats older than 45 days at $1.1K a month and rising; a service account holding Enterprise write with no traffic in 90 days; a partner sandbox at 18 of 25 seats with invites still open.
CEDX Admin operator workspace in natural daylight
FIELD DOCUMENTARY · PLATFORM & IDENTITY

Seat waste, priced per pack

The sharpest alert on the Overview is structural, not technical: an org-owner still signing in with a password only. The console notices, because that is what it is for.

CAMERA: CANON EOS R5 · 35MM F/1.4 · NATURAL DAYLIGHT ESTATE ROUTE: /APP/ADMIN
CORE CAPABILITIES · CEDX ADMIN

Three architectural jobs CEDX Admin gets right on one record.

Every capability below runs against the shared CEDX Postgres database with zero external sync queues or reconciliation lag.

01 · PLATFORM & IDENTITY FOUNDATION

Seat waste, priced per pack

The Seats screen is a waste radar: 396 idle seats, $14K a month in waste, and the packs ranked by a waste score. The platform suite leads at 82 with 14 idle, 6 over-tier and 3 ghost seats at $1.1K a month. Even the AI packs are counted: $718 of waste across 91 AI seats.

✓ Idle, over-tier and ghost broken out per packVerified
✓ Reclaim simulator and scoring model are tabs on the screenVerified
✓ 8 packs cross the high-waste line (score ≥55)Verified
02 · LIVE EXECUTION

36 roles, sensitivity labelled

The role table separates system from tenant-defined: 36 templates, 21 custom, each with permission count, member count and a sensitivity label. The two orphan roles (zero members, one of them a legacy admin with 40 permissions marked Critical) are exactly what a role audit goes looking for.

36 roles, sensitivity labelled
CEDX Admin Live Telemetry ● 2,485 licensed seats
03 · DETERMINISTIC GOVERNANCE

Users, with seat and MFA in one row

The Users table joins the two facts admins usually chase across two tools: what seat someone holds and whether MFA is on. 130 privileged accounts at 87% MFA coverage means 17 are not covered, and the idle-30d card counts 255 accounts with 19 of those without MFA either.

✓ Role, seat tier, MFA flag and last active per rowActive
✓ Active · Invited · Suspended · Deprovisioned chipsActive
✓ Roles from Help desk to Org owner, seats Member to EnterpriseActive
04 · VERIFIED DEMO DATASET METRICS

What the live CEDX Admin build looks like when you open /app/admin.

Every figure below is directly inspectable in the running CEDX Admin application workspace with zero synthetic projections.

LICENSED SEATS
2,485
1,677 assigned · 67% util
SEAT WASTE PER MONTH
$14K
idle + over-tier + ghost
ROLE TEMPLATES
36
13 privileged · 2 orphan
MFA ON PRIVILEGED ACCOUNTS
87%
130 accounts in scope
4-SCREEN RUNNING BUILD TOUR

Four screens captured from admin.cedxsystems.com, in the order operators run them.

Click any screen below to inspect how CEDX Admin moves from initial intake to verified cross-estate completion.

01 OVERVIEW
Estate health with the alerts root-caused
Seat utilisation reads 67%, and the alert list says what to do about it: 14 idle Enterprise seats older than 45 days at $1.1K a month and rising; a service account holding Enterprise write with no traffic in 90 days; a partner sandbox at 18 of 25 seats with invites still open.
02 USERS
Who holds what, and whether it is safe
320 identities with department, status, role, seat, MFA and last active on the row. The gap between 87% MFA on privileged accounts and 100% is not a report request. It is a filter away.
03 SEATS
Where the licence money goes
2,485 licensed, 1,677 assigned, and the waste radar beneath priced pack by pack: viewer pool with 28 idle, project packs with 16 idle and 5 ghost. Waste $ is a column, not a quarterly estimate.
04 ROLES
Templates, customs and the orphans
Thirty-six roles with permission and member counts, sensitivity from Low to Critical. Orphan roles, the ones nobody holds, are counted on the header, because a Critical role with zero members is still a key under the mat.
01 OVERVIEW · ADMIN.CEDXSYSTEMS.COM

Estate health with the alerts root-caused

● Live Screen Capture

Seat utilisation reads 67%, and the alert list says what to do about it: 14 idle Enterprise seats older than 45 days at $1.1K a month and rising; a service account holding Enterprise write with no traffic in 90 days; a partner sandbox at 18 of 25 seats with invites still open.

✓ Directory, seats, drift, waste and MFA on one header rowVerified in /app/admin
✓ Privilege drift leaderboard, service accounts firstVerified in /app/admin
✓ 24 workspaces, 4 flagged near seat capVerified in /app/admin
Estate health with the alerts root-caused
OPERATING CADENCE · PLATFORM & IDENTITY

How CEDX Admin runs across the week, in the exact order work happens.

Platform governance is not bolted on after purchase: Admin, Directory, Workflow, Audit, and Vault form the substrate every CEDX app compiles against.

STAGE 01

Capture & Ingest

Records land in CEDX Admin already linked to the canonical customer, employee, or vendor ID.

STAGE 02

Score & Triage

Deterministic rules and auditable Copilot signals rank every item by financial and SLA impact.

STAGE 03

Execute & Approve

Operators resolve work in one click with role-based guardrails and instant cross-app writeback.

STAGE 04

Reconcile & Report

Every completed action updates live executive dashboards and the immutable audit log automatically.

OPERATOR WORKSPACES · WHO RUNS CEDX ADMIN

Three roles open CEDX Admin every day. Each sees the exact surface they own.

Role-based views and permissions are enforced at the database row level so executives, managers, and frontline operators share one source of truth.

IT administration using CEDX Admin

IT administration

Owns the seat ledger. The 396 idle seats and the reclaim simulator are their monthly number, argued from the same table finance sees.

● idle seats · 396
Security using CEDX Admin

Security

Owns the drift board: 27 high-drift principals, the org-owner on password-only sign-in, and the service accounts holding write access with no traffic.

● high drift · 27
Workspace owners using CEDX Admin

Workspace owners

Own the 24 workspaces and the seat caps: 4 of them near the limit with invites still open, which the Overview flags before the invite fails.

● workspaces · 24
ONE CANONICAL RECORD ACROSS 132 APPLICATIONS

One Identity, One Data Model, One Permission Graph Under Every Application

CEDX Admin is not an isolated point tool. It reads and writes the exact same customer, ledger, and identity records as the rest of the CEDX software estate.

CONNECTED MODULE 01 Open /identity/ ->

CEDX Identity

Admin counts 130 privileged accounts; Identity is where their sign-in factors and policies actually live.
CONNECTED MODULE 02 Open /directory/ ->

CEDX Directory

The 320 identities on Admin's user table are the records Directory keeps sourced and current. Idle seats often start as orphaned accounts.
CONNECTED MODULE 03 Open /entitlements/ ->

CEDX Entitlements

Seat tiers and packs map to the feature flags and plans Entitlements serves. The $14K waste question is a plan question too.
CONNECTED MODULE 04 Open /audit/ ->

CEDX Audit

Role changes, seat grants and workspace edits are admin-class events, 124 of them in the demo audit stream.
ARCHITECTURAL PROOF · OPERATOR PERSPECTIVES

Why enterprise operators replace stitched SaaS stacks with CEDX Admin.

"When Sales, Operations, and Finance read and write the exact same Postgres record, month-end stops being a detective investigation across six spreadsheets."

Elena Rostova
Elena Rostova
Chief Financial Officer · Northline Group

"Our operators actually enjoy opening the workspace. Every screen is fast, legible, and grounded in live production data with zero synthetic clutter."

David Okafor
David Okafor
VP of Enterprise Systems · Harbor Holdings

"Having identity, least-privilege access, audit trails, and business applications on one kernel cut our security review and provisioning time by 82%."

Sarah Lindqvist
Sarah Lindqvist
Chief Information Security Officer · Atlas Corp
LIVE TCO & CONSOLIDATION MODEL · PLATFORM & IDENTITY

Stop paying five vendors to re-sync the same platform & identity record.

Drag the seat slider to compare your current stitched stack (Okta Workforce + Workato + MuleSoft + Vanta + Splunk Audit) against running CEDX Admin natively on the unified CEDX estate.

Organization Seats 250 seats
25 seats 500 seats 1,250 seats 2,500 seats
Legacy Stitched Stack
Okta Workforce + Workato + MuleSoft + Vanta + Splunk Audit
$1,380,000 / yr
CEDX Admin + Full Estate Bundle
All 132 applications · Canonical Postgres · Unlimited Copilot
$267,000 / yr
Verified Annual Hard Savings
Plus 0 middleware sync failures
$1,113,000 / yr
TECHNICAL & PROCUREMENT FAQ · CEDX ADMIN

Questions operators and architecture teams ask before piloting CEDX Admin.

01 Is the software on this page real? +
Yes. Every screenshot is a capture of the running build and you can open the same build at /app/admin . It runs on demo data, which the page says next to the figures rather than in a footnote.
02 How is seat waste calculated? +
Three buckets, visible on the Seats screen: idle (no activity), over-tier (a bigger seat than the role needs) and ghost (invites never accepted). Each pack shows all three counts with a dollar figure and a waste score. The scoring model is a tab on the same screen.
03 What is privilege drift? +
The distance between what a principal can do and what their role says they should. The Overview leaderboards it: service accounts with elevated write and no traffic score highest, 95 and 84 in the demo data. The fix is scoped to a role, not a suspicion.
04 Can we create our own roles? +
Yes: 21 of the 36 roles in the demo tenant are custom, and New role is a button on the table. Every role carries a permission count, member count and sensitivity label so a custom Critical role is visible as such.
05 Does this replace our identity admin console? +
Admin is the org console for the CEDX estate: seats, roles, workspaces. Identity is where sign-in policy and MFA live. How the two map onto your existing stack is the estate map conversation.
LIVE SANDBOX · ZERO MIDDLEWARE · NO CARD REQUIRED

CEDX Admin is running right now. Open it and inspect the record.

Explore the live CEDX Admin workspace on canonical demo data at /app/admin, or book a 30-minute architecture session to map your first entity rollout.

Open live CEDX Admin (/app/admin) -> Book an estate architecture map