Users Management

Overview

The Users module is the central hub for managing all user accounts in your admin panel. Here you can create new users, edit existing accounts, assign roles and permissions, control user status, and perform bulk operations. This module provides a comprehensive interface for all user-related administrative tasks.

Accessing Users Management

Navigation: Dashboard > Users > Manage Users

Required Permission: users.view

Key Features

• User Account Management: Create, edit, and delete user accounts
• Role Assignment: Assign multiple roles to users for flexible permission management
• Search and Filtering: Quickly find users by name, email, role, or status
• Bulk Operations: Perform role assignments or removals on multiple users at once
• Status Control: Activate or deactivate user accounts
• Permission Overview: View all permissions a user has through their roles

Main Interface

List View

The users list displays all user accounts in a paginated table with the following information:

Columns:

• Checkbox (if you have users.manage_roles permission): Select users for bulk actions
• User: Avatar and name of the user
• Email: User's email address
• Roles: Badges showing all roles assigned to the user
• Status: Active or Inactive indicator
• Joined: Date when the user account was created
• Actions: Quick action buttons (View, Edit, Delete)

Available Filters:

• Search: Filter by name or email (real-time search)
• Role Filter: Show only users with a specific role
• Status Filter: Filter by active or inactive status

Sorting:

• Users are sorted by creation date (newest first) by default
• 15 users are displayed per page

Pagination:

• Navigate through pages using the pagination controls at the bottom
• Page numbers and navigation arrows are provided

Actions Available

• View Details: Click on a user row or the view icon to see full user details
• Edit User: Modify user information, roles, and status
• Delete User: Remove a user account (with restrictions)
• Assign Role: Add a role to a user
• Remove Role: Remove a role from a user
• Bulk Actions: Perform operations on multiple selected users

Common Tasks

Creating a New User

1. Click the "Add New User" button in the top right corner
2. Fill in the required fields:
   • Name: Full name of the user (required, max 255 characters)
   • Email: Valid email address (required, must be unique)
   • Password: Secure password (required, minimum 8 characters)
   • Confirm Password: Re-enter password for confirmation
   • Role: Select the primary role (required)
   • Status: Choose Active or Inactive (required)
3. Click "Create User" to save

Validation Rules:

• Email must be unique in the system
• Password must be at least 8 characters long
• All required fields must be filled

What Happens:

• User account is created with the specified information
• Password is securely hashed before storage
• Selected role is automatically assigned
• User creation is logged in the audit system
• Success message confirms the creation

Editing a User

1. Find the user in the list (use search if needed)
2. Click the Edit button (pencil icon) or click on the user row
3. Update the desired fields:
   • Name: Change the user's name
   • Email: Update email address (must remain unique)
   • Role: Change the primary role
   • Status: Toggle between Active and Inactive
   • Roles: Select multiple roles using checkboxes
   • Password: (Optional) Enter new password if changing
   • Confirm Password: (Required if changing password)
4. Click "Update User" to save changes

Important Notes:

• Leaving password fields empty will keep the existing password
• Changing email requires it to still be unique
• Role changes take effect immediately
• All changes are logged in the audit system

Assigning Roles

Method 1: During User Edit

1. Edit the user account
2. In the Roles section, check the boxes for roles you want to assign
3. Save the changes

Method 2: From User Details

1. View the user's details page
2. Click "Assign Role" button
3. Select the role from the dropdown
4. Click "Assign"

Method 3: Bulk Assignment

1. Select multiple users using checkboxes
2. Click "Bulk Actions" button
3. Choose "Assign Role"
4. Select the role to assign
5. Confirm the action

Notes:

• Users can have multiple roles simultaneously
• Roles are cumulative (users get all permissions from all their roles)
• Super admin users cannot have their roles modified
• Role assignments are logged in audit logs

Removing Roles

Method 1: From User Edit

1. Edit the user account
2. Uncheck the role you want to remove
3. Save the changes

Method 2: From User Details

1. View the user's details page
2. Find the role badge you want to remove
3. Click the "Remove" button next to the role
4. Confirm the removal

Method 3: Bulk Removal

1. Select multiple users using checkboxes
2. Click "Bulk Actions" button
3. Choose "Remove Role"
4. Select the role to remove
5. Confirm the action

Deleting a User

1. Find the user in the list
2. Click the Delete button (trash icon)
3. Confirm the deletion in the popup dialog
4. User account is permanently removed

Restrictions:

• You cannot delete your own account (prevents accidental self-removal)
• Super admin accounts may have additional protections
• Deletion is permanent and cannot be undone

What Happens:

• User account is removed from the database
• All role assignments are removed
• User data is logged before deletion for audit purposes
• Associated data (API tokens, sessions) may be cleaned up

Viewing User Details

1. Click on a user row or the View button (eye icon)
2. The user details page shows:
   • Basic Information: Name, email, status, join date
   • Roles: All assigned roles with badges
   • Permissions: Complete list of permissions from all roles, grouped by category
   • Statistics: Last login time, account activity
   • Actions: Quick buttons for editing, role management

Searching and Filtering

Search by Name or Email:

1. Type in the search box at the top of the page
2. Results filter automatically as you type
3. Search looks for matches in both name and email fields

Filter by Role:

1. Use the "Filter by Role" dropdown
2. Select a specific role
3. Only users with that role will be displayed

Filter by Status:

1. Use the status filter dropdown
2. Choose "Active" or "Inactive"
3. List updates to show only users with that status

Combining Filters:

• You can use search and filters together
• Filters are cumulative (all conditions must match)
• Clear filters by selecting "All" or clearing the search box

Bulk Operations

Bulk Role Assignment:

1. Check the boxes next to users you want to modify
2. Click the "Bulk Actions" button that appears
3. Select "Assign Role"
4. Choose the role from the dropdown
5. Click "Apply"
6. Success message shows how many users were updated

Bulk Role Removal:

1. Select users using checkboxes
2. Click "Bulk Actions"
3. Select "Remove Role"
4. Choose the role to remove
5. Click "Apply"
6. Confirmation shows the number of users affected

Tips for Bulk Operations:

• Use the "Select All" checkbox in the table header to select all visible users
• Bulk operations only affect users who actually have (or don't have) the role
• All bulk operations are logged individually in audit logs

Settings and Options

Name Field

• Type: Text input
• Required: Yes
• Max Length: 255 characters
• Description: The full name of the user as it will appear throughout the system
• Example: "John Smith"

Email Field

• Type: Email input
• Required: Yes
• Max Length: 255 characters
• Validation: Must be a valid email format and unique in the system
• Description: User's email address for login and notifications
• Example: "john.smith@example.com"

Password Field

• Type: Password input
• Required: Yes (for new users), No (when editing)
• Min Length: 8 characters
• Description: Secure password for user authentication
• Notes: Must be confirmed by re-entering in the confirmation field

Confirm Password Field

• Type: Password input
• Required: Yes (when password is provided)
• Description: Must match the password field exactly
• Notes: Prevents typos when setting passwords

Role Field

• Type: Select dropdown
• Required: Yes
• Options: super_admin, admin, editor, seo_manager, user
• Description: The primary role that defines the user's base permissions
• Notes: This is the legacy role field; modern systems use the Roles checkboxes

Roles Field (Multiple Selection)

• Type: Checkbox list
• Required: No
• Description: Select one or more roles to assign to the user
• Notes: Users inherit all permissions from all assigned roles

Status Field

• Type: Select dropdown
• Required: Yes
• Options: Active, Inactive
• Description: Controls whether the user can log in and access the system
• Notes:
  • Active: User can log in normally
  • Inactive: User cannot log in but account is preserved

Permissions

The following permissions control access to the Users module:

• users.view: Can view the users list and user details
• users.create: Can create new user accounts
• users.edit: Can edit existing user information
• users.delete: Can delete user accounts
• users.manage_roles: Can assign and remove roles from users, perform bulk operations

Permission Hierarchy:

• Viewing users is the base permission required to access the module
• Creating, editing, and deleting require their respective permissions
• Managing roles is a separate permission for security reasons
• Super admins have all permissions by default

Tips and Best Practices

• Use Strong Passwords: Enforce minimum 8-character passwords, but encourage users to use longer, more complex passwords
• Assign Roles, Not Direct Permissions: Use the role system rather than assigning permissions directly to users
• Regular Access Reviews: Periodically review user accounts and remove inactive or unnecessary accounts
• Descriptive Names: Use full names to make it easier to identify users in the system
• Status Over Deletion: Consider setting users to "Inactive" instead of deleting them to preserve audit history
• Bulk Operations for Efficiency: Use bulk actions when making the same change to multiple users
• Test with Impersonation: After assigning roles, use the impersonation feature to verify the user's access
• Monitor Audit Logs: Review audit logs regularly to track user management activities

Troubleshooting

Problem: Cannot Create User - Email Already Exists

Solution: The email address is already registered in the system. Check if the user already exists using the search function. If needed, edit the existing user or use a different email address.

Problem: Cannot Delete User - "Cannot delete your own account"

Solution: This is a security feature to prevent accidental self-removal. If you need to delete or deactivate your account, ask another administrator to do it, or set your status to "Inactive" instead.

Problem: User Cannot Log In After Creation

Solution: Check the following:

• Verify the user's status is set to "Active"
• Confirm the user is using the correct email and password
• Check if the user has at least one role assigned
• Review any security settings (IP whitelist, 2FA requirements)

Problem: Role Assignment Not Working

Solution:

• Verify you have the users.manage_roles permission
• Check if the user is a super admin (super admins cannot have roles modified)
• Ensure the role exists in the system
• Try refreshing the page and attempting again

Problem: Bulk Actions Button Not Visible

Solution: The bulk actions button only appears if:

• You have the users.manage_roles permission
• At least one user is selected using the checkboxes
• Check your permissions with an administrator if needed

Problem: Search Not Finding Users

Solution:

• Ensure you're searching for exact or partial matches in name or email
• Check if filters are applied that might be excluding the user
• Try clearing all filters and searching again
• Verify the user actually exists in the system

Problem: Cannot Edit Super Admin Users

Solution: This is a security feature. Super admin users have special protections to prevent accidental modification. Only super admins can modify other super admin accounts.

Related Modules

• Roles: Create and manage the roles you assign to users
• Permissions: View all available permissions and understand what each role can do
• Impersonation: Log in as a user to test their access and troubleshoot issues
• Audit Logs: Review all user management activities and changes
• Security Settings: Configure password policies and security requirements