Skip to content

Tenant Schedules

What this screen is for

Tenant Schedules shows one tenant's schedules and the history of their runs, as the scheduling service holds them. Each schedule carries the automatic rotation of one of the tenant's keys: a schedule appears when the tenant enables automatic rotation on a key, and each run is one rotation planned for when the key falls due.

The screen is read-only. It changes no schedule, runs nothing and offers no rotation: rotating a key, now or on a schedule, is the tenant's own operation, taken from the tenant's key inventory.

What must exist first

This is a platform screen, reached from the platform's operations navigation.

  • The scheduling.platform.schedules.read permission, which shows the navigation entry and the screen. Without it the entry is absent and the screen states that the permission is required.
  • The permission to list tenants, which fills the tenant selector. When the list cannot be read, the screen says so in place of the selector.

Decisions you make here

Choosing a tenant

Choose a tenant in the selector. Choosing one reads its schedules; it does not open the tenant or act as it. The page and the selected schedule belong to that tenant, so choosing another starts again from its first page.

Reading the schedules

Each schedule shows the key it rotates, its status, Active, Paused, Cancelled or Completed, when it was created and when it last changed. Twenty schedules are shown per page. The Active schedule is selected first, otherwise the most recent; select another to read its runs. A tenant with no schedules has enabled automatic rotation on none of its keys.

Reading the runs

The runs of the selected schedule are listed 20 per page. Each shows its state, what started it, the earliest time it may run, the time it was planned for, how many attempts it took, its result, its reason code and when it completed. A run that was replaced by a newer one says so: that happens when the key is rotated, or its schedule changes, before the run falls due. A schedule that has not run yet says so.

When the scheduling service is unavailable, the screen says so and offers Retry, and shows no earlier page as current. When a read is refused, the screen says the schedule cannot be read with your access.

How it relates to other screens

The tenant enables automatic rotation, reads the same schedules and runs on a key's Rotation schedule tab, and rotates the key there with Rotate now:

The tenants you choose from are managed here:

Where to read more