Administration Guide

This guide covers installation, user management, multi-tenancy, and day-to-day operations for ForecastAI 2026.01 (Mirabelle).

---

Quick Reference

Task	Where
Install dependencies	Installation
Start the application	Installation
Create a new tenant	Tenants
Manage users	Users
Check process logs	Operations
Restart cleanly	Operations
Update parameters	Settings → Parameters in the UI
Run a pipeline step	Processes → Process Runner in the UI

---

Architecture Summary

┌──────────────────────────────────────────────────────────────┐
│                    ForecastAI 2026.01                        │
│                                                              │
│   React 18 SPA (port 5173 in dev / served by API in prod)   │
│                      ↕ /api/*                               │
│         FastAPI (files/api/main.py, port 8002)               │
│                      ↕ psycopg2                              │
│         PostgreSQL (localhost:5432)                          │
│   ┌────────────────────────────────────────────────┐         │
│   │  forecastai_master DB  ─  master.accounts       │         │
│   │  forecastai_master DB  ─  master.superadmins    │         │
│   └────────────────────────────────────────────────┘         │
│   ┌─────────────┐  ┌─────────────┐  ┌─────────────┐         │
│   │ tenant_a DB │  │ tenant_b DB │  │ tenant_c DB │         │
│   │ scenario.*     │  │ scenario.*     │  │ scenario.*     │         │
│   └─────────────┘  └─────────────┘  └─────────────┘         │
└──────────────────────────────────────────────────────────────┘

The application is multi-tenant: each organisation (account) has its own PostgreSQL database with a scenario schema. The forecastai_master database holds account metadata and superAdmin credentials. All tenant data is fully isolated.

---

Role Hierarchy

Role	Capabilities
superadmin	Full access to all tenants. Can provision new tenants, manage superAdmins, switch between any account. Stored in master.superadmins.
admin	Full access within their tenant. Can create/edit users, run pipeline steps, access all features.
user	Regular access. Can be granted can_run_process or can_create_override permissions individually. Can be restricted to specific segments.