---
id: JNY-PFM-OPS-001
title: A customer administrator investigates workspace runs
feature: FEAT-PFM-OPS-01
product_area: platform
module: operations
revision: 1
status: draft
product_intent: confirmed
implementation_evidence: observed
supersedes: []
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
actor: ACT-PFM-001
goal: Understand recent workspace work and inspect the explanation of a failed run.
capabilities:
  - CAP-PFM-OPS-005
  - CAP-PFM-OPS-007
screens:
  - '/console/{tenantId}/maintenance'
  - '/console/{tenantId}/maintenance/scheduled-jobs'
steps:
  - 'n': 1
    surface: '/console/{tenantId}/maintenance'
    action: Enter Maintenance through the user menu.
    capability: CAP-PFM-OPS-005
    expected: Scheduled Jobs opens as the available Maintenance screen.
    provenance: test
    source: 'react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#is the only thing Maintenance holds'
  - 'n': 2
    surface: listJobsOfTenant
    action: Inspect the workspace run list.
    capability: CAP-PFM-OPS-005
    expected: 'Recent runs display their type, application, subject, status, timing and requester.'
    provenance: test
    source: >-
      react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#lists the tenant's runs: what each was about,
      its status, and who started it
  - 'n': 3
    surface: listJobKindsOfTenant
    action: Select a run category.
    capability: CAP-PFM-OPS-005
    expected: The choices show locally present categories and counts and the list follows the selected type.
    provenance: test
    source: >-
      react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#filtering by job type narrows the list to that
      type
  - 'n': 4
    surface: getJobOfTenant
    action: Inspect a failed row.
    capability: CAP-PFM-OPS-005
    expected: 'The read-only panel presents failure detail, steps, attempts and events.'
    provenance: test
    source: >-
      react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#a row opens the run, read-only, in a drawer on
      the right
  - 'n': 5
    surface: listJobsOfTenant
    action: Inspect a published run owned by another service.
    capability: CAP-PFM-OPS-007
    expected: The shared list includes the owner’s readable subject.
    provenance: test
    source: >-
      services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#answers exactly the tenant's jobs,
      of every macroservice
alternates:
  - from_step: 2
    condition: Staff enter through a workspace access grant.
    path: Use the same workspace run surface under that grant.
    outcome: The granted workspace remains the reading boundary.
    provenance: test
    source: >-
      services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#lists exactly the tenant's jobs,
      whatever customer they name
failures:
  - from_step: 1
    condition: Jobs-read authority is missing.
    path: Suppress the Maintenance link and refuse the page.
    outcome: The caller cannot inspect runs.
    provenance: test
    source: >-
      react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#is the console's Access Denied state, and its
      link is not offered
  - from_step: 4
    condition: The selected run belongs to another workspace.
    path: Return an unknown-run response.
    outcome: No foreign run details are exposed.
    provenance: test
    source: >-
      services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#answers the run as unknown under
      another tenant's path
rules_in_play:
  - BR-CAP-PFM-OPS-005-03
  - BR-CAP-PFM-OPS-005-04
  - BR-CAP-PFM-OPS-005-09
  - BR-CAP-PFM-OPS-007-04
assertions:
  - id: AS-JNY-PFM-OPS-001-01
    statement: Workspace reads cover that workspace’s published services without admitting foreign workspace runs.
    provenance: test
    source: >-
      services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#refuses another customer's tenant,
      as every tenant route does
  - id: AS-JNY-PFM-OPS-001-02
    statement: 'The monitor supplies inspection without start, cancellation or retry controls.'
    provenance: test
    source: 'services-platform:modules/jobs/tests/e2e/jobs.e2e.spec.js#declares every jobs route a GET'
  - id: AS-JNY-PFM-OPS-001-03
    statement: Workspace snapshot runs retain their month-specific subjects even without customer attribution.
    provenance: test
    source: >-
      services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#names Platform's snapshot run by
      its snapshot and month
e2e_policy: required
e2e_reason: >-
  Browser evidence is needed for navigation, displayed run information and permission refusal; backend cases
  separately establish workspace scope.
proved_by: []
---

# A customer administrator investigates workspace runs

## Story

A customer administrator checks the workspace’s recent runs, narrows the list and opens a failure for investigation. The workspace monitor can include work published by several Rhythm services. The administrator follows the recorded outcome without receiving execution controls. Permission refusals and missing jobs remain explicit so an empty result is not mistaken for authority to inspect other workspaces.