Canonical KHEMS administration
User and facility provisioning
Changes are validated server-side and recorded under your signed-in identity.
Supabase Auth + canonical RBAC
Invite or assign a user
Existing accounts are reused. New accounts receive an invitation; administrators never set the user's password.
Inactive until every check passes
Provision a facility
The service validates the canonical identity, YMS Sheet, private document library, and Google service-account access before activation.
Canonical facilities
| Facility | State | YMS resources | Action |
|---|
Durable audit
Recent provisioning requests
| Updated | Type | Status | Target | Result |
|---|