Users

The Users tab in Settings lets Superadmins administer local sign-in accounts. It is not the personal settings screen: signed-in users change their own password from User Settings, while organization membership and workspace roles are administered separately.

Local account administration

The Users API is restricted to the superadmin role. It supports listing, creating, editing, resetting the password of, and deleting local sign-in accounts.

Listing

The list shows each account’s email, name, local role, and password-rotation status.

Inviting a user

Click New user. Fill in:

• Email — must be a valid email address.
• Name — display name.
• Role — Superadmin or User.
• Initial password — optional. Leave blank to auto-generate.

Save. If the password was auto-generated, the panel shows it once on screen. Copy it now — there is no way to see it again. Hand it to the user out of band.

The new account is marked for a password change on its first sign-in.

Changing a role

On the user’s row, change the local role and save. The system prevents removal of the last Superadmin account.

Resetting password

Click Reset password on a user’s row. The system generates a new temporary password, sets mustChangePassword = true, and shows the new password once. Communicate it out of band.

Resetting a password removes the user’s existing sessions and requires the new temporary password on the next sign-in.

Disabling and deleting

• Delete. Permanent. The system removes the user’s sessions before deleting the account.

Constraints

• The last Superadmin account cannot be removed.
• A user cannot delete their own account from the Users tab.