MMapplsProduct Guides

LEARN THE COMPLETE PLATFORM

One product. Clear journeys for every job.

Use these guided paths to evaluate product depth, permission boundaries and the operating model. Each journey maps directly to a one-click role in the live platform.

8Role journeys6Operating playbooks5NABARD adoption stages1Live tenant-aware platform

ROLE JOURNEYS

Evaluate what each persona can—and cannot—do

Every journey ends with an observable result and an audit record. Attempting a prohibited action returns a permission error.

01 · CONSUME

API Consumer

Discover a product, compare exposure and authentication, register an application, inspect credential expiry and request an access plan.

  1. Open API products
  2. Review the Kisan Credit Eligibility contract
  3. Open Applications and register a sandbox client
  4. Rotate the client credential
  5. Open Access requests and follow status
Cannot create or publish API contracts.
02 · BUILD

Integration Developer

Create versioned interface and integration assets, then run a checkpointed business workflow with an idempotency key.

  1. Create an API product draft
  2. Create a reusable integration asset
  3. Inspect supported financial protocols
  4. Start KCC Eligibility & Decision
  5. Follow the paused run by correlation ID
Cannot self-approve publication or production release.
03 · GOVERN

API Product Manager

Own product lifecycle, subscription risk, policy revisions and segregated environment promotion.

  1. Review pending access
  2. Record an approval rationale
  3. Publish or deprecate an API product
  4. Approve a policy revision
  5. Review quality gates and deploy a release
Cannot administer organizations or operate incidents.
04 · ADMINISTER

Workspace Administrator

Manage the members, service accounts, security controls and delegated governance of one customer workspace.

  1. Review organization workspaces
  2. Invite a user with the minimum role
  3. Review MFA and access-review status
  4. Inspect certificate expiry
  5. Review workspace API and release posture
Cannot cross organization boundaries.
05 · OPERATE PLATFORM

Platform Administrator

Operate the multi-organization control plane, distributed runtimes, customer workspaces and emergency controls.

  1. Review global command centre
  2. Inspect DC and DR gateway groups
  3. Provision a new isolated workspace
  4. Enter time-bound support access with reason
  5. Exit and verify the audit trail
All privileged actions require explicit audit context.
06 · ASSURE

Security & Compliance Auditor

Review security posture, customer assurance mapping, workflow evidence and privileged audit without mutation rights.

  1. Inspect security score and control coverage
  2. Review expiring certificates
  3. Open NABARD customer assurance
  4. Search immutable audit history
  5. Trace a workflow run
Read-only across all assurance surfaces.
07 · RESTORE SERVICE

Site Reliability & Support

Diagnose signals, manage incidents, operate gateway nodes, replay DLQ messages and resume approved workflow recovery.

  1. Review observability and active alerts
  2. Open or update an incident
  3. Drain a gateway node group
  4. Replay messages with incident reason
  5. Resume a waiting workflow
Cannot alter product contracts or access entitlements.
08 · VALIDATE

Super Administrator

Validate the complete product and control model across product, runtime, operations and administration.

  1. Review all product suites
  2. Exercise maker-checker paths
  3. Validate cross-tenant visibility
  4. Execute controlled recovery
  5. Confirm every result in audit
Use only for protected break-glass and evaluation scenarios.

OPERATING PLAYBOOKS

Repeatable procedures for critical platform work

Production runbooks add customer-specific contacts, commands, evidence locations and escalation matrices.

PLAYBOOK 01

Onboard a partner

  1. Confirm legal entity, identity and data purpose.
  2. Register a named application and environment.
  3. Select the API plan, scopes, quota and SLO.
  4. Complete risk and network/mTLS checks.
  5. Approve, issue and test credentials.
  6. Record go-live owner and support route.
PLAYBOOK 02

Promote a release

  1. Freeze the signed artifact and configuration.
  2. Verify contract and backward compatibility.
  3. Verify security and performance evidence.
  4. Confirm dashboards, alerts and runbook.
  5. Approve change and rollback plan.
  6. Deploy, observe and close evidence.
PLAYBOOK 03

Recover a workflow

  1. Locate the run by business correlation ID.
  2. Inspect committed steps and side effects.
  3. Classify retry, resume, compensate or reconcile.
  4. Obtain required maker-checker approval.
  5. Execute from the persisted checkpoint.
  6. Verify downstream and business outcome.
PLAYBOOK 04

Replay dead-letter messages

  1. Open or link the recovery incident.
  2. Fix the root cause before replay.
  3. Choose a bounded message set.
  4. Confirm idempotent consumer behavior.
  5. Replay with reason and observation.
  6. Reconcile counts and close evidence.
PLAYBOOK 05

Respond to S1

  1. Start the incident command and SLA clock.
  2. Protect service using failover or workaround.
  3. Correlate traffic, workflow and broker signals.
  4. Restore within the agreed objective.
  5. Reconcile and communicate service health.
  6. Continue root-cause and problem management.
PLAYBOOK 06

Exercise disaster recovery

  1. Approve scope, data checkpoints and success criteria.
  2. Validate DC/DR replication posture.
  3. Fail service to DR and route traffic.
  4. Prove RPO, RTO and functional continuity.
  5. Reconcile state, messages and audit.
  6. Fail back and close all findings.

NABARD CUSTOMER ADOPTION

Configure the generic product for NABARD’s operating model

The product remains reusable; customer-specific architecture, integrations, acceptance criteria and service governance are applied as configuration and delivery assets.

  1. T+15Confirm

    Workload, interfaces, organization/workspace model, topology, security dependencies, migration waves and acceptance evidence.

  2. T+45Establish

    Development platform, identity, policies, CI/CD, developer experience and observability integration.

  3. T+75Integrate

    DC/DR runtime foundation, priority APIs, adapters, workflows, queues/topics and reusable patterns.

  4. T+90Prove

    Functional, performance, security, backup/restore, SOP, runbook, training and operational rehearsal.

  5. T+100Accept & operate

    VAPT closure, full DR drill, controlled cutover, reconciliation, customer sign-off and six-year service transition.