oap platform
Manage platform-level admin access (the admin UI gate)
oap platform grant-admin <email>
Grant platform admin (writes platform:platform#admin@user:<canonical(email)>)
oap platform list-admins
List platform admins
oap platform revoke-admin <email>
Revoke platform admin