Users & Access

The admin dashboard has three separate sections for managing people and permissions.

System Users (admin accounts)

Navigate to Users & Access → System Users.

System users are the accounts that can sign in to this admin dashboard. They map to the system_admins table.

Column	Description
Name	Display name
Email	Login email
Role	Assigned admin role (or none)
Super Admin	Whether they have all permissions
Last Login	Timestamp of most recent sign-in

Creating a system user

Requires isSuperAdmin = true.

1. Click + New System User.
2. Enter name, email, and a temporary password.
3. Optionally assign an Admin Role.
4. Click Create.

The user will be prompted to change their password on first login (if configured).

Admin Roles

Navigate to Users & Access → Admin Roles.

Admin roles let you group permissions and assign them to system users without granting full super-admin access.

Role-based permission enforcement is applied at the service layer — check lib/services/ for the current permission model.

Creating a role

Requires isSuperAdmin = true.

1. Click + New Role.
2. Enter a Name and unique Slug.
3. Click Create.

Users (tenant users)

Navigate to Users & Access → Users.

This section shows all end-users across all tenants — the people who use the operator portal (apps/web). Admins have a read-only cross-tenant view.

Column	Description
Name	Full name
Email	Account email
Tenant	Which tenant this user belongs to
Status	Active / Suspended

Password hashes and MFA secrets are never shown, even to super-admins.

Suspending / activating a user

Requires isSuperAdmin = true.

Click ⋯ → Suspend or ⋯ → Activate on any user row. Suspended users cannot sign in to the operator portal.