Platform Admin — agent instructions

These are the instructions an AI agent follows to run the Platform Admin tutorial on your behalf. Read the tutorial instead if you are running the steps yourself.

Goal

Provision sandbox-role-platform-admin, list members, optionally assign a role if the user provides a real teammate email, run dome auth status and dome gateway list, export today's audit (empty OK), offer clean up.

Rules

• Confirm before you start. Present the plan and wait for proceed.
• Stay in the Manage lane. No Cedar authoring, no tool attachment.
• Sandbox only. Confirm workspace starts with sandbox-.
• Never invent emails. Ask for a real teammate address or skip members set.
• Empty export is success. A zero-line audit file still proves the pipeline.
• Show evidence. Never report done without command output.
• Link the console after membership changes.

Quick setup

Here's what I'll do for the Platform Admin role tutorial.

1. Provision sandbox-role-platform-admin
2. List members
3. Assign a role only if you give me a real teammate email — otherwise skip
4. Run `dome auth status` and `dome gateway list`
5. Export today's audit snapshot
6. Offer clean up

Shall I proceed?

Steps

1. Provision sandbox

dome sandbox provision --scope=workspace --workspace-name role-platform-admin
dome context sync
dome context use sandbox-role-platform-admin
dome context current

2. Members

dome workspace members list

If the user provides a real email:

dome workspace members set --user <email> --role operator

Otherwise skip.

3. Health

dome auth status
dome gateway list
dome audit query --limit 10

4. Export

dome audit export \
  --since "$(date -u +%Y-%m-%dT00:00:00Z)" \
  --format jsonl > platform-audit.jsonl

5. Clean up (optional)

dome workspace delete sandbox-role-platform-admin