JK8 System Admin Platform Guide JK8 系统管理员后台操作指南

Navigate to /system/login. Enter your SuperAdmin email and password. Click Sign in as System Admin.访问 /system/login。输入超级管理员邮箱与密码，点击 Sign in as System Admin 完成初次登录。

In the System Shell sidebar, click Profile. Under the Two-Factor Authentication card, click Enable TOTP. The system displays a QR code and secret setup key with a 10-minute setup timer.在管理后台侧边栏点击底部 Profile。在 Two-Factor Authentication 卡片中点击 Enable TOTP。系统将生成 256x256 动态二维码及文本密钥，并开启 10 分钟有效倒计时。

Open Google Authenticator, Microsoft Authenticator, or 1Password. Scan the QR code, type the current 6-digit rolling numeric code into the input, and click Verify and enable.打开 Google Authenticator、Microsoft Authenticator 或 1Password 等认证软件扫描二维码。输入软件中生成的 6 位数字，点击 Verify and enable。

The modal displays 10 single-use recovery codes. Click Copy or Download to store them in a secure password vault.弹窗将显示 10 组一次性紧急备用恢复码。点击 Copy 复制或 Download 下载并存入离线安全保管库。

To disable 2FA or regenerate recovery codes, entering your current account password is strictly required to authorize the action.若需停用 2FA 或重新生成恢复码，必须在输入框录入当前账号的登录密码，方可授权执行变更。

In the top card form, enter Organization Name (e.g. Organization 1), Organization Slug (e.g. org-1), and optional Email host override (e.g. tenant.example.com, bare host only). Click + Add. The toast confirms: "Organization created".在顶部卡片表单录入 Organization Name（如 Organization 1）、Organization Slug（如 org-1）及选填的 Email host override（如 tenant.example.com，仅填纯主机名）。点击 + Add，系统提示："Organization created"。

In the organization row, click Subscription. The lower drawer opens. Select the target tier from Plan dropdown, select an Expires at calendar date, and click Save subscription. Toast: "Subscription updated".在组织表格行点击 Subscription 打开下方子面板。在 Plan 下拉菜单选择目标套餐，选择 Expires at 到期日期，点击 Save subscription。系统提示："Subscription updated"。

In the organization row, click Org Members. Input the executive's Email, optional New password, set Role to Owner, ensure All brands (*) is checked, and click Invite Member. Toast: "Member assigned".在组织表格行点击 Org Members 打开成员子面板。录入负责人 Email、可选 New password，将 Role 设为 Owner，勾选 All brands (*)，点击 Invite Member。系统提示："Member assigned"。

Click Brands on the organization row. Enter Brand Key (e.g. brand-1) and Brand Name (e.g. Brand 1). Click + Add. The brand is immediately provisioned under the tenant.在表格行点击 Brands。输入 Brand Key（如 brand-1）与品牌名称（如 Brand 1），点击 + Add 即可直接为该租户挂载品牌。

Click Email host on the organization row. Enter the tenant's custom portal hostname (e.g. app.organization.com). Click Save host. All invite and setup emails dispatched for this organization will now route to this custom domain.在表格行点击 Email host。输入租户专属前端域名（如 app.organization.com，不含 https:// 协议头与路径）。点击 Save host。该组织后续发送的所有激活邀请邮件均会自动解析并指向该域名。

In the Create owner invite card, enter the executive's Target email (e.g. owner@customer.com) and set Expires in days (1 to 30 days, default 7).在 Create owner invite 卡片中输入负责人邮箱 Target email（如 owner@customer.com），设定有效期 Expires in days（1 至 30 天，默认为 7 天）。

Click Create owner invite. If SMTP/Resend is configured, the invite email is dispatched automatically. If manual mode is active, the secure URL (https://app.example.com/owner-setup?token=tok_...) is automatically copied to your clipboard. Toast: "Invite created — copy link to share".点击 Create owner invite。若系统已配置 SMTP/Resend，系统将自动投递邮件；若为 manual 模式，系统将自动将完整安全链接（https://app.example.com/owner-setup?token=tok_...）复制到剪贴板，提示："Invite created — copy link to share"。

The owner opens the link, lands on /owner-setup, sets their executive password and display name, and claims the organization with full Owner permissions.客户负责人点击链接打开专属 /owner-setup 页面，设置个人密码与显示昵称后，即可一键认领该组织并获得全部管理权限。

In the Invitations table, click Resend to refresh the link or re-dispatch the email, or click Revoke to immediately invalidate a pending invitation.在邀请记录列表中，点击 Resend 可重新投递或刷新链接；点击 Revoke 可立即撤销并作废未使用的邀请凭证。

Click + New Announcement. The rich editor modal opens.点击右上角 + New Announcement 按钮打开富文本编辑弹窗。

Input Title and draft the HTML body using bold, lists, and links. Optionally set Start at and End at local timestamps to automate campaign rotation.输入公告标题 Title，在富文本编辑器中编排图文格式。可按需指定 Start at 开始时间与 End at 截止时间以实现定时生效。

Under General settings on the page, set Slideshow interval (between 3 and 120 seconds, default 5s) and click Save interval. Toggle Announcements active and Display brand logo switches as needed.在页面顶部常规设置中，输入轮播间隔 Slideshow interval（3 至 120 秒之间，默认为 5 秒），点击 Save interval。按需开启 Announcements active 全局总开关及 Display brand logo 品牌图标显示开关。

Filter events by Action filter (e.g. plan.created, organization.created, subscription.updated), or specify From and To calendar dates. Click Clear to reset filters.在顶部检索栏输入 Action filter（如 plan.created、organization.created、subscription.updated），或选择 From 与 To 日期区间进行精确筛选。点击 Clear 可一键重置。

Each log record displays the GMT+8 timestamp, actor email, target resource ID, and full JSON metadata payload capturing exact field mutations.每条记录均详细显示 GMT+8 操作时间、执行管理员邮箱、目标资源标识以及完整的变更前后 JSON 差异快照。

Click Export CSV in the page header. The system streams a CSV file named system_audit_YYYY-MM-DD.csv containing all filtered records for archival and regulatory compliance.点击页面右上角 Export CSV 按钮。系统将自动生成并下载名为 system_audit_YYYY-MM-DD.csv 的数据报表，便于合规归档与内部复盘。