User Guide

The AgentOps dashboard is a single-page application (SPA) built with Vite that provides day-to-day security operations for monitoring agents, managing policies, reviewing audit logs, investigating anomalies, and processing HITL approvals.

Access Requirements

Role	Dashboard	Agents	Policies	Audit	Anomalies	HITL	Settings
Viewer	✅	❌	❌	Read	❌	❌	✅
Developer	✅	✅	Read	Read	❌	❌	✅
Security Analyst	✅	❌	Read	Read/Export	Read	Approve/Reject	✅
Admin	✅	✅	Full	Read/Export	Read	Approve/Reject	✅
Super Admin	✅	✅	Full	Full	Full	Full	✅

Role-based navigation

Sidebar items are shown or hidden based on your role. If a page returns 403 Forbidden, contact your administrator to adjust your role.

Dashboard Pages

Page	Route	Description
Dashboard	/dashboard	KPI overview, activity chart, recent events
Agents	/agents	Agent registry, semantic search, details
Workflows	/workflows	Agent chains, templates, execute / cancel / retry
Cost	/cost	Spend, budgets, hard stops
Marketplace	/marketplace	Publish / install agent packages
Discovery	/discovery	Shadow AI candidates → HITL confirm
Policies	/policies	Policy management and templates
Audit	/audit	Audit log search and export
Anomalies	/anomalies	Anomaly reports and detector status
HITL	/hitl	Pending approval requests
Settings	/settings	API key, theme, plan

Authentication

The dashboard uses two credentials stored in browser session after login:

1. JWT access token — sent as Authorization: Bearer <token> for user-authenticated endpoints
2. Session API key — sent as X-API-Key for tenant-scoped API operations

Both are issued by POST /api/v1/auth/login and refreshed on each login.

Real-time Updates

The dashboard connects to the WebSocket endpoint for live notifications:

ws://localhost:8001/api/v1/ws?token=<jwt>

Events include policy violations, anomaly detections, HITL status changes, and system status updates. The connection indicator in the header shows platform health from GET /api/v1/status.

Keyboard Navigation

The dashboard includes accessibility features:

• Skip link — jump to main content
• Keyboard navigation — tab through interactive elements
• Modal focus trapping — dialogs trap focus for screen readers

Common Workflows

Monitor Security Posture

1. Open Dashboard for KPI summary
2. Review the activity chart for unusual spikes
3. Check Anomalies for ML-detected behavioral deviations
4. Drill into Audit for detailed event logs

Respond to a Policy Violation

1. A real-time toast appears when policy.violated fires
2. Navigate to Audit and filter by the agent or action
3. Review the violation context and risk score
4. If HITL is required, approve or reject in HITL

Manage Compliance Policies

1. Open Policies
2. Browse templates (GDPR, HIPAA, FZ-152)
3. Create or edit a policy from a template
4. Activate the policy and test with Policy Check (API or SDK)

Next Steps

• Dashboard — understand KPI cards and charts
• Policies — create compliance policies
• Audit — search and export logs